Docs: Add Auto Unseal Rekey example (#5952)
* Add KMS Rekey example I've had customers looking for AWS KMS rekeying examples today - when using pgp keys. This example would have clarified what they needed to do. * Replaced KMS reference with Auto Unseal ``` bash Rekey an Auto Unseal vault and encrypt the resulting recovery keys with PGP: ```
This commit is contained in:
parent
aa59563df5
commit
2e92372710
|
@ -47,6 +47,17 @@ $ vault operator rekey \
|
|||
-pgp-keys="keybase:hashicorp,keybase:jefferai,keybase:sethvargo"
|
||||
```
|
||||
|
||||
Rekey an Auto Unseal vault and encrypt the resulting recovery keys with PGP:
|
||||
|
||||
```text
|
||||
$ vault operator rekey \
|
||||
-target=recovery \
|
||||
-init \
|
||||
-pgp-keys=keybase:grahamhashicorp
|
||||
-key-shares=1
|
||||
-key-threshold=1
|
||||
```
|
||||
|
||||
Store encrypted PGP keys in Vault's core:
|
||||
|
||||
```text
|
||||
|
|
Loading…
Reference in a new issue