mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 14:29:09 +01:00
Ruben Hensen
e518e1368f
Chart 0.28.1 is only tested up to Kubernetes 1.30. 0.34.1 brings the injector to vault-k8s 1.7.6. The server image is pinned to the running 1.17.2: the StatefulSet uses OnDelete, so nothing restarts now, but a later pod restart would otherwise pull the chart's default and Shamir unsealing needs the keys at hand for a Vault upgrade. Rendered with the pin, the StatefulSet only changes in formatting and an extra check in the config script that doesn't apply here.
38 lines
923 B
YAML
38 lines
923 B
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: vault
|
|
namespace: argocd
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
syncPolicy:
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
automated:
|
|
selfHeal: true
|
|
prune: true
|
|
project: default
|
|
sources:
|
|
- chart: vault
|
|
repoURL: https://helm.releases.hashicorp.com
|
|
targetRevision: 0.34.1
|
|
helm:
|
|
valueFiles:
|
|
- $values/vault/overrides.yaml
|
|
- repoURL: https://github.com/rubenhensen/k8scd.git
|
|
targetRevision: HEAD
|
|
ref: values
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: vault
|
|
ignoreDifferences:
|
|
- group: admissionregistration.k8s.io
|
|
kind: MutatingWebhookConfiguration
|
|
jqPathExpressions:
|
|
- .webhooks[]?.clientConfig.caBundle
|
|
- group: apps
|
|
kind: StatefulSet
|
|
name: vault
|
|
jsonPointers:
|
|
- /spec/volumeClaimTemplates |