From 5ede00ec54d111e245d4f25b5c8b96901df90d4e Mon Sep 17 00:00:00 2001
From: "Ralf S. Engelschall" <rse@openpkg.org>
Date: Wed, 24 Apr 2019 17:45:25 +0200
Subject: [PATCH] fix hints

---
 vault/vault.spec | 19 +++++++++++--------
 1 file changed, 11 insertions(+), 8 deletions(-)

diff --git a/vault/vault.spec b/vault/vault.spec
index d3609d144a..97ac42d136 100644
--- a/vault/vault.spec
+++ b/vault/vault.spec
@@ -136,20 +136,23 @@ PreReq:       OpenPKG, openpkg >= 20160101, cfssl
           echo "   \$ $RPM_INSTALL_PREFIX/bin/vault status"
           echo "5. initialize database (remember unseal key and root token):"
           echo "   \$ $RPM_INSTALL_PREFIX/bin/vault operator init \\%{l_nil}"
-          echo "      -key-shares=1 -key-threshold=1 \\%{l_nil}"
-          echo "      -recovery-shares=1 -recovery-threshold=1"
+          echo "       -key-shares=1 -key-threshold=1 \\%{l_nil}"
+          echo "       -recovery-shares=1 -recovery-threshold=1"
           echo "   In case of a Vault cluster of N nodes use (N>K>1):"
           echo "   \$ $RPM_INSTALL_PREFIX/bin/vault operator init \\%{l_nil}"
-          echo "      -key-shares=N -key-threshold=K \\%{l_nil}"
-          echo "      -recovery-shares=N -recovery-threshold=K"
+          echo "       -key-shares=N -key-threshold=K \\%{l_nil}"
+          echo "       -recovery-shares=N -recovery-threshold=K"
           echo "6. unseal database (with remembered unseal key):"
           echo "   \$ $RPM_INSTALL_PREFIX/bin/vault operator unseal <key>"
           echo "7. authenticate against database (use remembered root token):"
           echo "   \$ $RPM_INSTALL_PREFIX/bin/vault login -method=token"
-          echo "8. write data under <name>:"
-          echo "   \$ $RPM_INSTALL_PREFIX/bin/vault write secret/<name> value=<value>"
-          echo "9. read data under <name>:"
-          echo "   \$ $RPM_INSTALL_PREFIX/bin/vault read -field=value secret/<name>"
+          echo "8. create key/value secret engine:"
+          echo "   \$ $RPM_INSTALL_PREFIX/bin/vault secrets enable \\%{l_nil}"
+          echo "     -version=2 -description=\"key-value store\" -path=kv kv"
+          echo "9. write key/value data under <name>:"
+          echo "   \$ $RPM_INSTALL_PREFIX/bin/vault kv put kv/<name> <key>=<value>"
+          echo "10. read key/value data under <name>:"
+          echo "   \$ $RPM_INSTALL_PREFIX/bin/vault kv get -field=<key> kv/<name>"
         ) | %{l_rpmtool} msg -b -t notice
     elif [ $1 -eq 2 ]; then
         #   after upgrade, restart service