vault operator unseal
vault operator unseal
vault operator unseal

vault status

vault login <root_token>

kubeadm upgrade plan

sudo yum install -y chrony
sudo systemctl enable --now chronyd
sudo chronyc tracking

# Eski repo o'chirish
sudo rm -f /etc/yum.repos.d/kubernetes.repo

# Yangi repo qo'shish (v1.34 uchun)
cat <<EOF | sudo tee /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://pkgs.k8s.io/core:/stable:/v1.34/rpm/
enabled=1
gpgcheck=1
gpgkey=https://pkgs.k8s.io/core:/stable:/v1.34/rpm/repodata/repomd.xml.key
exclude=kubelet kubeadm kubectl cri-tools kubernetes-cni
EOF

# Cache tozalash
sudo dnf clean all
sudo dnf makecache

# O'rnatish
sudo dnf install -y kubeadm kubelet kubectl --disableexcludes=kubernetes

# Restart
sudo systemctl daemon-reload
sudo systemctl restart kubelet

# Versiyani tekshirish
kubelet --version

vault operator migrate -config=/root/vault/migrate.hcl

storage_source "file" {
  path = "/opt/vault/data"
}

storage_destination "raft" {
  path    = "/opt/vault/raft"
  node_id = "vault-1"
}
cluster_addr = "http://127.0.0.1:8201"