auto-unseal

manifests/vault/values.yaml

@@ -6,6 +6,27 @@ server:
 
   standalone:
     enabled: true
+    config: |
+      ui = true
+
+      storage "file" {
+        path = "/vault/data"
+      }
+
+      listener "tcp" {
+        address     = "0.0.0.0:8200"
+        tls_disable = 1
+      }
+
+      disable_mlock = true
+
+      seal "transit" {
+        address = "https://vault-unseal-url"
+        token = "..."
+        disable_renewal = "false"
+        key_name = "autounseal"
+        mount_path = "transit/"
+      }
 
 ui:
   enabled: true