Change to values file

2026-09-17 02:12:55 +02:00 · 2024-09-07 08:52:09 +02:00
parent 214ee58bc1
commit 701d936f36
1 changed files with 44 additions and 6 deletions
@@ -1,6 +1,44 @@
-spec:
-  destination:
-    server: https://kubernetes.default.svc
-  source:
-    repoURL: https://charts.jetstack.io
-    targetRevision: 1.15.3
+global:
+  enabled: true
+  tlsDisable: false
+injector:
+  enabled: true
+server:
+  extraEnvironmentVars:
+      VAULT_CACERT: /vault/userconfig/vault-ha-tls/vault.ca
+      VAULT_TLSCERT: /vault/userconfig/vault-ha-tls/vault.crt
+      VAULT_TLSKEY: /vault/userconfig/vault-ha-tls/vault.key
+  volumes:
+      - name: userconfig-vault-ha-tls
+        secret:
+        defaultMode: 420
+        secretName: vault-ha-tls
+  volumeMounts:
+      - mountPath: /vault/userconfig/vault-ha-tls
+        name: userconfig-vault-ha-tls
+        readOnly: true
+  standalone:
+      enabled: false
+  affinity: ""
+  ha:
+      enabled: true
+      replicas: 3
+      raft:
+        enabled: true
+        setNodeId: true
+        config: |
+            cluster_name = "vault-integrated-storage"
+            ui = true
+            listener "tcp" {
+              tls_disable = 0
+              address = "[::]:8200"
+              cluster_address = "[::]:8201"
+              tls_cert_file = "/vault/userconfig/vault-ha-tls/vault.crt"
+              tls_key_file  = "/vault/userconfig/vault-ha-tls/vault.key"
+              tls_client_ca_file = "/vault/userconfig/vault-ha-tls/vault.ca"
+            }
+            storage "raft" {
+              path = "/vault/data"
+            }
+            disable_mlock = true
+            service_registration "kubernetes" {}