mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-09-17 02:12:55 +02:00
Change tls vault
This commit is contained in:
+4
-22
@@ -1,24 +1,11 @@
|
||||
global:
|
||||
enabled: true
|
||||
tlsDisable: false
|
||||
tlsDisable: true
|
||||
injector:
|
||||
enabled: true
|
||||
server:
|
||||
dataStorage:
|
||||
storageClass: longhorn
|
||||
extraEnvironmentVars:
|
||||
VAULT_CACERT: /vault/userconfig/vault-ha-tls/vault.ca
|
||||
VAULT_TLSCERT: /vault/userconfig/vault-ha-tls/vault.crt
|
||||
VAULT_TLSKEY: /vault/userconfig/vault-ha-tls/vault.key
|
||||
volumes:
|
||||
- name: userconfig-vault-ha-tls
|
||||
secret:
|
||||
defaultMode: 420
|
||||
secretName: vault-ha-tls
|
||||
volumeMounts:
|
||||
- mountPath: /vault/userconfig/vault-ha-tls
|
||||
name: userconfig-vault-ha-tls
|
||||
readOnly: true
|
||||
standalone:
|
||||
enabled: false
|
||||
affinity: ""
|
||||
@@ -32,12 +19,9 @@ server:
|
||||
cluster_name = "vault-integrated-storage"
|
||||
ui = true
|
||||
listener "tcp" {
|
||||
tls_disable = 0
|
||||
tls_disable = 1
|
||||
address = "[::]:8200"
|
||||
cluster_address = "[::]:8201"
|
||||
tls_cert_file = "/vault/userconfig/vault-ha-tls/vault.crt"
|
||||
tls_key_file = "/vault/userconfig/vault-ha-tls/vault.key"
|
||||
tls_client_ca_file = "/vault/userconfig/vault-ha-tls/vault.ca"
|
||||
}
|
||||
storage "raft" {
|
||||
path = "/vault/data"
|
||||
@@ -48,12 +32,10 @@ server:
|
||||
enabled: true
|
||||
annotations:
|
||||
cert-manager.io/cluster-issuer: prod-cluster-issuer
|
||||
nginx.ingress.kubernetes.io/ssl-passthrough: "true"
|
||||
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
|
||||
ingressClassName: nginx
|
||||
tls:
|
||||
- secretName: letsencrypt-prod
|
||||
- secretName: letsencrypt-prod
|
||||
hosts:
|
||||
- vault.hensen.io
|
||||
hosts:
|
||||
hosts:
|
||||
- host: "vault.hensen.io"
|
||||
|
||||
Reference in New Issue
Block a user