This document contains the steps needed to initialize an existing Vault instance and to obtain the role_id and app_id needed for Garden Enterprise.
At this point, you should already have a Vault instance running that you can connect to.
Setting up Vault JWT Authentication
The commands below should be run from a host that has access to Vault, not in the Vault instance itself.
After going through the these steps, you'll have the Vault App ID and Vault Secret ID that Garden Enterprise needs. These values are provided to Garden Enterprise via the admin console during the installation process.
Connect to Vault
How you connect to Vault depends on your set up. In what follows, we'll assume you're coming here from Initialize Bundled Vault step of our installation guide and that you will connect to Vault via a kubectl port-forward.
Assuming you have the kubectl context set to that of the Garden Enterprise cluster, run:
Add the app role ID and secret ID from the steps above to the Garden Enterprise admin console. If you came here from the Initialize Bundled Vault step of the installation guide, you can now proceed with the installation.