Change tls vault

This commit is contained in:
Ruben Hensen
2026-03-15 10:58:26 +01:00
parent 66d1ba9d13
commit 9581f1bb3e
2 changed files with 5 additions and 33 deletions
+4 -22
View File
@@ -1,24 +1,11 @@
global:
enabled: true
tlsDisable: false
tlsDisable: true
injector:
enabled: true
server:
dataStorage:
storageClass: longhorn
extraEnvironmentVars:
VAULT_CACERT: /vault/userconfig/vault-ha-tls/vault.ca
VAULT_TLSCERT: /vault/userconfig/vault-ha-tls/vault.crt
VAULT_TLSKEY: /vault/userconfig/vault-ha-tls/vault.key
volumes:
- name: userconfig-vault-ha-tls
secret:
defaultMode: 420
secretName: vault-ha-tls
volumeMounts:
- mountPath: /vault/userconfig/vault-ha-tls
name: userconfig-vault-ha-tls
readOnly: true
standalone:
enabled: false
affinity: ""
@@ -32,12 +19,9 @@ server:
cluster_name = "vault-integrated-storage"
ui = true
listener "tcp" {
tls_disable = 0
tls_disable = 1
address = "[::]:8200"
cluster_address = "[::]:8201"
tls_cert_file = "/vault/userconfig/vault-ha-tls/vault.crt"
tls_key_file = "/vault/userconfig/vault-ha-tls/vault.key"
tls_client_ca_file = "/vault/userconfig/vault-ha-tls/vault.ca"
}
storage "raft" {
path = "/vault/data"
@@ -48,12 +32,10 @@ server:
enabled: true
annotations:
cert-manager.io/cluster-issuer: prod-cluster-issuer
nginx.ingress.kubernetes.io/ssl-passthrough: "true"
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
ingressClassName: nginx
tls:
- secretName: letsencrypt-prod
- secretName: letsencrypt-prod
hosts:
- vault.hensen.io
hosts:
hosts:
- host: "vault.hensen.io"