vault: spike auto unseal with vault transit as an upgrade from the vault.sh process currently in use

[noahehall]

C

• the unseal process is currently invoked via a script; but vault docs speak of mysterious and magical auto unseal spell

T

• ...

A

• auto unseal: paid
  • alicloud kms
  • aws kms [prefferred]
    • cant afford it use seal transit instead
  • azure key vault
  • gcp cloud kms
  • oci kms
  • hsm pkcs11
• auto unseal: free
  • vault transit