Openstack Charmers Next Vault

Learn about actions >

• authorize-charm

  Authorize the vault charm to interact with vault

• disable-pki

  Disable the PKI secrets backend. This is needed if you wish to switch the CA type after being set up via either upload-signed-csr or generate-root-ca.

• generate-root-ca

  Generate a self-signed root CA

• get-csr

  Get intermediate CA csr

• get-root-ca

  Get the root CA certificate

• pause

  Pause the vault unit. This stops the vault service.

• refresh-secrets

  Refresh secret_id's and re-issue retrieval tokens for secrets endpoints

• reissue-certificates

  Reissue certificates to all clients

• reload

  Reloads the vault unit. This allows for limited configuration options to be re-read. Vault will not become sealed.

• restart

  Restarts the vault unit. Vault will become sealed.

• resume

  Resume the vault unit. This starts the vault service. Vault will become sealed.

• upload-signed-csr

  Upload a signed csr to vault