35 lines
777 B
Markdown
35 lines
777 B
Markdown
## vault-cli install
|
|
|
|
```bash
|
|
VAULT_VERSION="1.21.2"
|
|
wget https://releases.hashicorp.com/vault/${VAULT_VERSION}/vault_${VAULT_VERSION}_linux_amd64.zip
|
|
unzip vault_${VAULT_VERSION}_linux_amd64.zip
|
|
sudo mv vault /usr/local/bin/
|
|
```
|
|
|
|
## minio-cli
|
|
|
|
```bash
|
|
wget https://dl.min.io/client/mc/release/linux-amd64/mc -O /tmp/minio-cli
|
|
chmod +x /tmp/minio-cli
|
|
sudo mv /tmp/minio-cli /usr/local/bin/minio-cli
|
|
|
|
minio-cli alias set synology http://192.168.0.2:9000 k8s ----proper secret here----
|
|
|
|
```
|
|
|
|
|
|
## backup token
|
|
|
|
```bash
|
|
mkdir -p /etc/vault.d/
|
|
vault policy write backup - <<EOF
|
|
path "sys/storage/raft/snapshot" {
|
|
capabilities = ["read"]
|
|
}
|
|
EOF
|
|
|
|
vault token create -policy=backup -period=8760h -orphan > /etc/vault.d/backup-token
|
|
chmod 600 /etc/vault.d/backup-token
|
|
|
|
``` |