1. vault

Modify mdware-helm/scripts/vault/transit-vault-deploy.sh, service-vault-deploy.sh

When node select is required

#nodeSelector 입력이 안 먹혀서 직접 chart에 들어가서 수정해야함
#node label
kubectl edit node {{ worker-node }}
label: nodetype=infra

#chart/vault/values.yaml 수정
nodeSelector:
    nodetype: infra

Installation Procedure

1. scripts/init/transit-vault-injector-pvc.yaml, service-vault-injector-pvc.yaml files

   Run through k apply -f command

2. transit-vault-deploy.sh deploy

3. transit-vault-unseal.sh > Confirm file creation
4. In service-vault-deploy.sh, change CONF_SET to 1 and remove two server.service.* entries
5. service-vault-deploy.sh deploy
6. If you confirm that it has been uploaded, revert to step 4 (change to 0 and insert again)
7. service-vault-deploy.sh upgrade (You can ignore the error message)
8. service-vault-unseal.sh > Check the token value when it appears

2. Create secret

3. Install safe on k8s-master-1

wget https://github.com/Qarik-Group/safe/releases/download/v1.7.0/safe-linux-amd64
cp safe-linux-amd64 /bin/safe
chmod 777 /bin/safe

4. safe

safe target http://{ vault-activeClusterIP:PORT } vault
safe auth # vault token 입력
safe env 
safe import < { vault_data_json_file }
safe tree