This commit is contained in:
Vassiliy Yegorov
2022-07-27 22:37:33 +07:00
parent dcee510197
commit c3ba7baa48
11 changed files with 259 additions and 50 deletions

View File

@@ -40,16 +40,16 @@ injector:
# If true, will enable a node exporter metrics endpoint at /metrics.
metrics:
enabled: false
enabled: true
# External vault server address for the injector to use. Setting this will
# disable deployment of a vault server along with the injector.
externalVaultAddr: ""
externalVaultAddr: "https://vault.bildme.ru"
# image sets the repo and tag of the vault-k8s image to use for the injector.
image:
repository: "hashicorp/vault-k8s"
tag: "0.14.2"
tag: "0.16.1"
pullPolicy: IfNotPresent
# agentImage sets the repo and tag of the Vault image to use for the Vault Agent
@@ -57,7 +57,7 @@ injector:
# required.
agentImage:
repository: "hashicorp/vault"
tag: "1.9.2"
tag: "1.10.5"
# The default values for the injected Vault Agent containers.
agentDefaults:
@@ -216,7 +216,7 @@ injector:
server:
# If not set to true, Vault server will not be installed. See vault.mode in _helpers.tpl for implementation details
enabled: true
enabled: false
# [Enterprise Only] This value refers to a Kubernetes secret that you have
# created that contains your enterprise license. If you are not using an
@@ -236,7 +236,7 @@ server:
image:
repository: "hashicorp/vault"
tag: "1.9.2"
tag: "1.10.5"
# Overrides the default Image Pull Policy
pullPolicy: IfNotPresent
@@ -724,7 +724,7 @@ ui:
# serviceType can be used to control the type of service created. For
# example, setting this to "LoadBalancer" will create an external load
# balancer (for supported K8S installations) to access the UI.
enabled: true
enabled: false
publishNotReadyAddresses: true
# The service should only contain selectors for active Vault pod
activeVaultPodOnly: false
@@ -764,7 +764,7 @@ csi:
image:
repository: "hashicorp/vault-csi-provider"
tag: "0.4.0"
tag: "1.1.0"
pullPolicy: IfNotPresent
# volumes is a list of volumes made available to all containers. These are rendered