fix: restart vault-unseal

- restart vault-unseal when the unseal keys change
2024-02-25 21:23:43 +11:00 · 2024-02-25 21:23:43 +11:00 · d1f5d3c09e
commit d1f5d3c09e
parent 8112c07ba8
1 changed files with 1 additions and 1 deletions
--- a/site/profiles/manifests/vault/unseal.pp
+++ b/site/profiles/manifests/vault/unseal.pp
@ -32,6 +32,6 @@ class profiles::vault::unseal (
    active    => true,
    enable    => true,
    require   => File['/usr/local/bin/vault-unseal.sh'],
-    subscribe => Service['vault'],
+    subscribe => [Service['vault'],File['/etc/vault/unseal_keys']],
  }
 }