feat(vault): add vault-unseal-keys Secret via ksops after operator init — vault was never initialized (empty S3 bucket), unseal keys captured from init; pod postStart auto-unseals on restart

2026-08-12 13:53:09 -07:00
parent 28e66ccf63
commit 0a3d45606e
2 changed files with 26 additions and 0 deletions
@@ -17,3 +17,4 @@ files:
  - loki-secrets.enc.yaml
  - minio-secrets.enc.yaml
  - vault-secrets.enc.yaml
+  - vault-unseal-keys.enc.yaml