Vault is sealed for API call

Vault
1

I use vault for generating certificate, Application uses Vault APIs for this. Recently noticed vault APIs returning Vault is sealed to application.
I fixed this just by login to vault and unsealing via cli.

Want to know whats is correct practice when accessing Vault APIs.

2

You’d need to look and find out why Vault is sealing thru the logs. It is not normal for Vault to seal itself uncommanded.

3

realized vault container was restarted. it could be the reason for seal.

In such scenario, manual unsealing via cli is the only way ? or any other way possible ?

4

If you are using shamir keys to unseal, then manual unseal must be performed on a restart/seal event.
You can auto unseal the cluster as well: Seal/Unseal | Vault by HashiCorp

5

This worked

       lifecycle:
         postStart:
           exec:
             command: ["/bin/sh", "-c", "vault operator unseal $VAULT_KEY"]