This API validates Vault backups using a POST request. It checks the integrity of the backup data to ensure it can be safely restored.

Send a JSON object with the following fields:

source_backup_url (string): URL of the source Vault backup.

source_keys_url (string): URL of the source Vault unseal keys and token.

path_values_map (json): key-pair values of secret_path and the expected key-values in that path.

vault_version (string): version of vault where the backup is taken from.

Status 200 OK: Validation successful.

Status 400 Bad Request: Validation unsuccessful/Invalid or missing parameters.

Status 500 Internal Server Error: Unexpected error.

Sample Request:

POST /api/v1/validate

{ "source_backup_url": "https://example.com/backup.snap", "source_keys_url": "https://example.com/keys.json", "path_values_map":{ "secret/key-1-for-balaji": { "key1":"value1", "key2":"value-2" } }, "vault_version":"1.15.0" }

keys.json Expected format

{ "keys": [ "key_in_hexa" ], "keys_base64": [ "key_in_base64" ], "root_token": "root_token_string" }

Sample Response

{ "message":"Backup is valid", "status":"success" }