Files
k8scd/vault/overrides.yaml
T

42 lines
995 B
YAML

global:
enabled: true
tlsDisable: true
injector:
enabled: true
server:
dataStorage:
storageClass: longhorn
standalone:
enabled: false
affinity: ""
ha:
enabled: true
replicas: 3
raft:
enabled: true
setNodeId: true
config: |
cluster_name = "vault-integrated-storage"
ui = true
listener "tcp" {
tls_disable = 1
address = "[::]:8200"
cluster_address = "[::]:8201"
}
storage "raft" {
path = "/vault/data"
}
disable_mlock = true
service_registration "kubernetes" {}
ingress:
enabled: true
annotations:
cert-manager.io/cluster-issuer: prod-cluster-issuer
ingressClassName: nginx
tls:
- secretName: letsencrypt-prod
hosts:
- vault.rubenhensen.nl
hosts:
- host: "vault.rubenhensen.nl"