Restore a backup

Pre-requisites:

To restore a Vault Backup, ensure you:

• Have a Vault cluster deployed.
• Your Vault deployment is in active idle state.
• Have access to S3 storage where your backup is saved.
• Have configured the settings for S3 storage.
• Have access to the unseal keys and root-token used by the Vault cluster at the time of creating the backup.

Once the prerequisites are in place you can run the restore-backup action on the leader unit to restore the specified backup, providing the following parameters to the action:

• backup-id: Identifier of the backup you are attempting to restore, as saved on the S3 storage.
• unseal-keys: A list of the unseal keys of the Vault cluster at the time of the backup.
• root-token: The root token of the Vault cluster at the time of creating the backup.

juju run vault/leader restore-backup backup-id=<backup-id> unseal-key=<unseal-keys> root-token=<root-token>

List backups:

You can get a list of the identifiers of all the backups that are stored on the configured S3 storage using the list-backups action:

juju run vault/leader list-backups