Skip to content

Instantly share code, notes, and snippets.

@woods

woods/check_vault_seal_status.sh

Last active June 7, 2024 05:22
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save woods/f6d16321999234443c0d to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save woods/f6d16321999234443c0d to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. woods revised this gist Jan 24, 2016. 1 changed file with 2 additions and 2 deletions.
    4 changes: 2 additions & 2 deletions check_vault_seal_status.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -1,7 +1,7 @@
    #!/bin/bash

    # Assumes the following:
    # - The `curl` and `jq` packages are installed
    # - The `curl` package is installed
    # - Vault is listening on the standard port 8200
    # - Vault is using https with a valid certificate

    @@ -20,7 +20,7 @@ json=`curl -s https://${1}:8200/v1/sys/seal-status`
    if [ $? == 0 ] ; then

    # Check to see if vault is sealed.
    echo $json | jq '.sealed == false' > /dev/null
    echo $json | jq '.sealed == false' | grep -q true
    if [ $? == 0 ] ; then
    # Good. Vault is unsealed.
    echo "OK - Vault is unsealed"
  2. woods created this gist Jan 24, 2016.
    40 changes: 40 additions & 0 deletions check_vault_seal_status.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,40 @@
    #!/bin/bash

    # Assumes the following:
    # - The `curl` and `jq` packages are installed
    # - Vault is listening on the standard port 8200
    # - Vault is using https with a valid certificate

    # The hostname of the vault server that we're supposed to check.
    hostname=$1

    if [ -z "$hostname" ] ; then
    echo "Usage: check_vault_seal vault_server_hostname"
    exit 3
    fi

    # Fetch the vault status in json format.
    json=`curl -s https://${1}:8200/v1/sys/seal-status`

    # Did we succeed in fetching the vault status?
    if [ $? == 0 ] ; then

    # Check to see if vault is sealed.
    echo $json | jq '.sealed == false' > /dev/null
    if [ $? == 0 ] ; then
    # Good. Vault is unsealed.
    echo "OK - Vault is unsealed"
    exit 0
    else
    # Bad. Vault is sealed.
    echo "CRITICAL - Vault is sealed"
    exit 2
    fi

    else

    # Failed to fetch vault status.
    echo "UNKNOWN - Failed to fetch vault seal status"
    exit 3

    fi