P4: Custos Deployment Custos Deployment Step 3 4

Deploy Vault

Back to Home

1. Run the following command to install hashicorp vault

helm install vault hashicorp/vault --namespace vault -f values.yaml --version 0.10.0

2. Modify the host name in the ingress.yaml file as below

3. Run the yaml file using the below commands

kubectl apply -f ingress.yaml -n vault

4. Wait for sometime and run the below command to check if the certificate is true

kubectl get certificate -n vault

5. Once the certificate is true, check if all the pods are up using the following command

kubectl get all -n vault

The output should look like the following screenshot

6. After this step, we can verify if the vault is working by checking the url:

https://js-157-10.jetstream-cloud.org/ui/vault/init

Modify the host name with your host name

7. Enter the key stores values as 5 and key threshold value as 3 and initialize

8. Click on continue to unseal

You will get a json in the following format:-

{
  "keys": [
  ],
  "keys_base64": [
  ],
  "root_token": ""
}

9. Copy the first key, second key and third key in order and unseal them one at a time

10. After the keys are used to unseal, enter the token from the above json to login

11. The pod-vault-0 should now be running. This can be verified by the following command.

kubectl get all -n vault