Jakub Fišer
Jakub Fišer
Upstream has implemented something like this: https://github.com/hashicorp/vault/issues/19879
Right, dynamic secrets and rotating creds (and honestly anything beyond kv and pki) is still a rather new territory for us. Updated the OP to not be (too) misleading.
One thing I don't understand is why `special` top-level devices cannot be removed when there are raidz primary devices. I mean, I (think I) understand why raidz top-level devices cannot...
@hashicorp/vault If I implemented this, would you accept a PR?
@cipherboy sure, I'll take a tour through the code and with some luck, I can try to PR a draft and we can work with that
Not sure what the error means exactly but a couple of wild guesses and tips: - did you try the `peers.json` approach? - did you try moving the data dir...
> No. This issue for me is after an in-place upgrade from Vault 1.14.8 to OpenBao 2.2.0 Sorry, wasn't clear enough - I meant the original original data. I suppose...
I'll try to replicate this and see what happens. What is your ultimate goal with this exercise?
Why tho? Is this a two-step migration to Docker/K8s? Or DR plan? Or you're simply evaluating backup options?
OK, thanks. I'm thinking if there's another option. Assuming your DR scenario is to have a single node acting as emergency until the cluster is restored, there might be another...