From 2e9237271001989b1aaefe59136bc5edd6e443cc Mon Sep 17 00:00:00 2001 From: Graham Land Date: Thu, 3 Jan 2019 14:23:43 +0000 Subject: [PATCH] Docs: Add Auto Unseal Rekey example (#5952) * Add KMS Rekey example I've had customers looking for AWS KMS rekeying examples today - when using pgp keys. This example would have clarified what they needed to do. * Replaced KMS reference with Auto Unseal ``` bash Rekey an Auto Unseal vault and encrypt the resulting recovery keys with PGP: ``` --- website/source/docs/commands/operator/rekey.html.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/website/source/docs/commands/operator/rekey.html.md b/website/source/docs/commands/operator/rekey.html.md index dc5e4421a..41af3f1e1 100644 --- a/website/source/docs/commands/operator/rekey.html.md +++ b/website/source/docs/commands/operator/rekey.html.md @@ -47,6 +47,17 @@ $ vault operator rekey \ -pgp-keys="keybase:hashicorp,keybase:jefferai,keybase:sethvargo" ``` +Rekey an Auto Unseal vault and encrypt the resulting recovery keys with PGP: + +```text +$ vault operator rekey \ + -target=recovery \ + -init \ + -pgp-keys=keybase:grahamhashicorp + -key-shares=1 + -key-threshold=1 +``` + Store encrypted PGP keys in Vault's core: ```text