{"action":"created","issue":{"url":"https://api.github.com/repos/hashicorp/vault/issues/2025","repository_url":"https://api.github.com/repos/hashicorp/vault","labels_url":"https://api.github.com/repos/hashicorp/vault/issues/2025/labels{/name}","comments_url":"https://api.github.com/repos/hashicorp/vault/issues/2025/comments","events_url":"https://api.github.com/repos/hashicorp/vault/issues/2025/events","html_url":"https://github.com/hashicorp/vault/issues/2025","id":185041822,"number":2025,"title":"Generating a new encrypted root token from a root token.","user":{"login":"MiLk","id":29782,"avatar_url":"https://avatars.githubusercontent.com/u/29782?v=3","gravatar_id":"","url":"https://api.github.com/users/MiLk","html_url":"https://github.com/MiLk","followers_url":"https://api.github.com/users/MiLk/followers","following_url":"https://api.github.com/users/MiLk/following{/other_user}","gists_url":"https://api.github.com/users/MiLk/gists{/gist_id}","starred_url":"https://api.github.com/users/MiLk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MiLk/subscriptions","organizations_url":"https://api.github.com/users/MiLk/orgs","repos_url":"https://api.github.com/users/MiLk/repos","events_url":"https://api.github.com/users/MiLk/events{/privacy}","received_events_url":"https://api.github.com/users/MiLk/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-10-25T07:44:30Z","updated_at":"2016-10-26T05:55:04Z","closed_at":null,"body":"Is it possible to generate a new root token from an existing root token and have the new root token encrypted with PGP?\r\n\r\nI'm using ansible to provision my Vault cluster, and it needs the unencrypted token to do the configuration. I would like to generate a new encrypted token, send it by email, then revoke the previous unencrypted token.\r\n\r\nIt seems that only `vault init` and `vault generate-root` accept a PGP key to encrypt the generated token. But both of them are using the master key shares.\r\n\r\nOr does anyone has a better workflow to automate Vault configuration?"},"comment":{"url":"https://api.github.com/repos/hashicorp/vault/issues/comments/256256251","html_url":"https://github.com/hashicorp/vault/issues/2025#issuecomment-256256251","issue_url":"https://api.github.com/repos/hashicorp/vault/issues/2025","id":256256251,"user":{"login":"MiLk","id":29782,"avatar_url":"https://avatars.githubusercontent.com/u/29782?v=3","gravatar_id":"","url":"https://api.github.com/users/MiLk","html_url":"https://github.com/MiLk","followers_url":"https://api.github.com/users/MiLk/followers","following_url":"https://api.github.com/users/MiLk/following{/other_user}","gists_url":"https://api.github.com/users/MiLk/gists{/gist_id}","starred_url":"https://api.github.com/users/MiLk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MiLk/subscriptions","organizations_url":"https://api.github.com/users/MiLk/orgs","repos_url":"https://api.github.com/users/MiLk/repos","events_url":"https://api.github.com/users/MiLk/events{/privacy}","received_events_url":"https://api.github.com/users/MiLk/received_events","type":"User","site_admin":false},"created_at":"2016-10-26T05:55:04Z","updated_at":"2016-10-26T05:55:04Z","body":"I'm not sure to understand how works response wrapping and how to use it.\r\nCould you give me more details?"}}
{"actor":{"display_login":"MiLk"}}