---
title: Charmhub | Deploy Vault using Charmhub - The Open Operator Collection
description: Deploy the latest version of Vault as a Kubernetes Operator on any cloud.
url: https://charmhub.io/vault-k8s/actions
---

# Vault

[Canonical Telco](https://charmhub.io/publisher/telco-charmers "View all packages from Canonical Telco")

* [Canonical Telco](https://charmhub.io/publisher/telco-charmers "View all packages from Canonical Telco")

Platform:

2.0/stable 565

```
juju deploy vault-k8s --channel 2.0/stable
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

* [authorize-charm](https://charmhub.io/vault-k8s/actions#authorize-charm)
* [bootstrap-raft](https://charmhub.io/vault-k8s/actions#bootstrap-raft)
* [create-backup](https://charmhub.io/vault-k8s/actions#create-backup)
* [list-backups](https://charmhub.io/vault-k8s/actions#list-backups)
* [restore-backup](https://charmhub.io/vault-k8s/actions#restore-backup)

[Learn about actions >](https://juju.is/docs/juju/action)

* authorize-charm

  Authorizes the charm to be able to interact with Vault to manage its operations. A token is required for Vault to use to create the app role and the policy the charm will use to interact with Vault. This token must be placed in a juju secret, and access to this secret should be granted to the charm.

  Params

  + secret-id
    string

    The Juju secret ID for the secret containing a token for Vault that can create new policies, such as the root token that is provided upon initializing Vault. Used to create the app role and policy for the charm. It is not stored by the charm.

  Required

  secret-id
* bootstrap-raft

  Bootstraps raft using a peers.json file. This action requires the application to first be scaled to a single unit. Bootstrapping can help recover when quorum is lost, however, it may cause uncommitted Raft log entries to be committed. See https://developer.hashicorp.com/vault/docs/concepts/integrated-storage#manual-recovery-using-peers-json for more details.
* create-backup

  Creates a snapshot of the Raft backend and saves it to the S3 storage. Returns the backup ID.

  Params

  + skip-verify
    boolean

    Whether to skip the verification of the S3 connection TLS certificate. If set to "true", the charm will not verify the S3 connection.
* list-backups

  Lists all available backups.

  Params

  + skip-verify
    boolean

    Whether to skip the verification of the S3 connection TLS certificate. If set to "true", the charm will not verify the S3 connection.
* restore-backup

  Restores a backup from the S3 storage to the Raft backend. Returns the backup ID.

  Params

  + backup-id
    string

    Backup ID to restore.
  + skip-verify
    boolean

    Whether to skip the verification of the S3 connection TLS certificate. If set to "true", the charm will not verify the S3 connection.

  Required

  backup-id