Comment 13 for bug 1845933

I used auto-generate-root-ca-cert: true and also i used totally-unsecure-auto-unlock: true. So i guess unseal should also be automatically (Maybe i am wrong but anyone it is not in blocked status as supposed to be) . For some reason Vault service is not installed on the first machine at all so here is the output i get from command you gave me:

k8s@juju-mgmt:~/.local/share/juju/ssh$ juju run-action vault/0 --wait generate-root-ca
unit-vault-0:
  id: 2da21796-6c7a-458a-80e2-aeb62ec4d521
  message: Vault is not ready (Cannot initialise local client)
  status: failed
  timing:
    completed: 2019-09-30 18:44:59 +0000 UTC
    enqueued: 2019-09-30 18:44:54 +0000 UTC
    started: 2019-09-30 18:44:58 +0000 UTC
  unit: vault/0

I tried with different configurations multiple times. Sometimes it just don't run Vault on some of the instances and once it actually showed that it cannot connect to MySQL (Percona cluster) since the host was not allowed to connect.

If you want i can post whole bundle here?