home-kubernetes/docker-30/vault/backup.md

vault-cli install

VAULT_VERSION="1.21.2"
wget https://releases.hashicorp.com/vault/${VAULT_VERSION}/vault_${VAULT_VERSION}_linux_amd64.zip
unzip vault_${VAULT_VERSION}_linux_amd64.zip
sudo mv vault /usr/local/bin/

minio-cli

wget https://dl.min.io/client/mc/release/linux-amd64/mc -O /tmp/minio-cli
chmod +x /tmp/minio-cli
sudo mv /tmp/minio-cli /usr/local/bin/minio-cli

minio-cli alias set synology http://192.168.0.2:9000 k8s ----proper secret here----

backup token

mkdir -p /etc/vault.d/
vault policy write backup - <<EOF
   path "sys/storage/raft/snapshot" {
     capabilities = ["read"]
   }
EOF
   
vault token create -policy=backup -period=8760h -orphan > /etc/vault.d/backup-token
chmod 600 /etc/vault.d/backup-token