un-seal

Automates the initialization or unsealing of a Juju-deployed Vault cluster.
It handles leader-finding, unsealing all units, and automatically
authorizing the Juju charm.

This tool securely manages credentials by storing the root token and each
unseal key in separate GPG-encrypted files, enabling hardware-backed
security (YubiKey) and separation of duties.

It features a robust 3-tier loading system:
1. Auto-detects keys in the credentials directory.
2. Falls back to prompting for individual file paths.
3. Provides a final fallback for raw, manual key entry.

This snap bundles 'jq', 'vault', and 'gpg'. It requires the 'juju'
command to be installed on the host system.

How to install:

sudo snap install un-seal

then, connect the necessary interfaces:

sudo snap connect un-seal:dot-local-share-juju

sudo snap connect un-seal:gpg-keys

sudo snap connect un-seal:pcscd

Source code: https://github.com/Ankow99/un-seal