Skip to content

Commit e7edc2d

Browse files
committed
hashicorp vault manifest for k8s deployment
1 parent 8908fa0 commit e7edc2d

1 file changed

Lines changed: 53 additions & 2 deletions

File tree

k8s/vault.yaml

Lines changed: 53 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,12 +2,28 @@ apiVersion: v1
22
kind: Namespace
33
metadata:
44
name: vault
5+
labels:
6+
app.kubernetes.io/name: vault
7+
app.kubernetes.io/instance: vault
8+
app.kubernetes.io/managed-by: Helm
9+
annotations:
10+
meta.helm.sh/release-name: vault
11+
meta.helm.sh/release-namespace: vault
512
---
613
apiVersion: v1
714
kind: PersistentVolumeClaim
815
metadata:
916
name: vault-pvc
1017
namespace: vault
18+
labels:
19+
app: vault
20+
app.kubernetes.io/name: vault
21+
app.kubernetes.io/instance: vault
22+
app.kubernetes.io/component: storage
23+
app.kubernetes.io/managed-by: Helm
24+
annotations:
25+
meta.helm.sh/release-name: vault
26+
meta.helm.sh/release-namespace: vault
1127
spec:
1228
accessModes:
1329
- ReadWriteOnce
@@ -21,6 +37,15 @@ kind: ConfigMap
2137
metadata:
2238
name: vault-config
2339
namespace: vault
40+
labels:
41+
app: vault
42+
app.kubernetes.io/name: vault
43+
app.kubernetes.io/instance: vault
44+
app.kubernetes.io/component: config
45+
app.kubernetes.io/managed-by: Helm
46+
annotations:
47+
meta.helm.sh/release-name: vault
48+
meta.helm.sh/release-namespace: vault
2449
data:
2550
vault.hcl: |
2651
ui = true
@@ -32,14 +57,23 @@ data:
3257
address = "0.0.0.0:8200"
3358
tls_disable = 1
3459
}
35-
api_addr = "http://vault-service.vault.svc.cluster.local:8200"
36-
cluster_addr = "https://vault-service.vault.svc.cluster.local:8201"
60+
api_addr = "http://0.0.0.0:8200"
61+
cluster_addr = "https://0.0.0.0:8201"
3762
---
3863
apiVersion: v1
3964
kind: ServiceAccount
4065
metadata:
4166
name: vault
4267
namespace: vault
68+
labels:
69+
app: vault
70+
app.kubernetes.io/name: vault
71+
app.kubernetes.io/instance: vault
72+
app.kubernetes.io/component: service-account
73+
app.kubernetes.io/managed-by: Helm
74+
annotations:
75+
meta.helm.sh/release-name: vault
76+
meta.helm.sh/release-namespace: vault
4377
---
4478
apiVersion: v1
4579
kind: Service
@@ -48,6 +82,13 @@ metadata:
4882
namespace: vault
4983
labels:
5084
app: vault
85+
app.kubernetes.io/name: vault
86+
app.kubernetes.io/instance: vault
87+
app.kubernetes.io/component: service
88+
app.kubernetes.io/managed-by: Helm
89+
annotations:
90+
meta.helm.sh/release-name: vault
91+
meta.helm.sh/release-namespace: vault
5192
spec:
5293
selector:
5394
app: vault
@@ -65,6 +106,13 @@ metadata:
65106
namespace: vault
66107
labels:
67108
app: vault
109+
app.kubernetes.io/name: vault
110+
app.kubernetes.io/instance: vault
111+
app.kubernetes.io/component: server
112+
app.kubernetes.io/managed-by: Helm
113+
annotations:
114+
meta.helm.sh/release-name: vault
115+
meta.helm.sh/release-namespace: vault
68116
spec:
69117
replicas: 1
70118
selector:
@@ -74,6 +122,9 @@ spec:
74122
metadata:
75123
labels:
76124
app: vault
125+
app.kubernetes.io/name: vault
126+
app.kubernetes.io/instance: vault
127+
app.kubernetes.io/component: server
77128
spec:
78129
nodeSelector:
79130
kubernetes.io/hostname: minikube-m03

0 commit comments

Comments
 (0)