feat(vault): add vault-unseal-keys Secret via ksops after operator init — vault was never initialized (empty S3 bucket), unseal keys captured from init; pod postStart auto-unseals on restart

2026-08-12 13:53:09 -07:00
parent b7b1f15084
commit 5e97c5cf64
2 changed files with 26 additions and 0 deletions
@@ -17,3 +17,4 @@ files:
  - loki-secrets.enc.yaml
  - minio-secrets.enc.yaml
  - vault-secrets.enc.yaml
+  - vault-unseal-keys.enc.yaml