Skip to content

Commit

Permalink
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: add hcp vault deployment
Browse files Browse the repository at this point in the history
leonsteinhaeuser committed Nov 28, 2024

Verified

This commit was signed with the committer’s verified signature.
leonsteinhaeuser Leon Steinhäuser
1 parent 86e7ed0 commit a16418c
Showing 2 changed files with 62 additions and 0 deletions.
14 changes: 14 additions & 0 deletions ocp/deployments/helm_hcp_namespace.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
apiVersion: v1
kind: Namespace
metadata:
annotations:
openshift.io/description: ""
openshift.io/display-name: ""
openshift.io/requester: kubeadmin
#openshift.io/sa.scc.mcs: s0:c26,c20
#openshift.io/sa.scc.supplemental-groups: 65535/10000
#openshift.io/sa.scc.uid-range: 65535/10000
argocd.argoproj.io/sync-wave: "-1"
labels:
argocd.argoproj.io/managed-by: openshift-gitops
name: hcp-operators
48 changes: 48 additions & 0 deletions ocp/deployments/helm_hcp_vault.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,48 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: hcp-vault
namespace: &ns hcp-operators
labels:
argocd.argoproj.io/sync-wave: "-1"
spec:
destination:
namespace: *ns
server: https://kubernetes.default.svc
project: hashicorp
source:
chart: vault
repoURL: https://helm.releases.hashicorp.com
targetRevision: 0.29.1
helm:
releaseName: hcp-vault
valuesObject:
global:
openshift: true
injector:
image:
repository: "registry.connect.redhat.com/hashicorp/vault-k8s"
tag: "1.5.0-ubi"
agentImage:
repository: "registry.connect.redhat.com/hashicorp/vault"
tag: "1.18.1-ubi"
server:
image:
repository: "registry.connect.redhat.com/hashicorp/vault"
tag: "1.18.1-ubi"
readinessProbe:
path: "/v1/sys/health?uninitcode=204"
syncPolicy:
automated:
prune: true
selfHeal: true
retry:
backoff:
duration: 5s
factor: 2
maxDuration: 3m0s
limit: 5
syncOptions:
- PruneLast=true
- ApplyOutOfSyncOnly=true
- ServerSideApply=true

0 comments on commit a16418c

Please sign in to comment.