Skip to content

Instantly share code, notes, and snippets.

@rdemoraes
Last active August 5, 2024 16:52
Show Gist options
  • Save rdemoraes/d3e6c14702885dd568a13231412258a3 to your computer and use it in GitHub Desktop.
Save rdemoraes/d3e6c14702885dd568a13231412258a3 to your computer and use it in GitHub Desktop.
ArgoCD Application Object for Vault
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: microk8s-hcp-vault
namespace: argocd
spec:
syncPolicy:
automated:
prune: false
selfHeal: true
syncOptions:
- CreateNamespace=true
- PrunePropagationPolicy=foreground
- PruneLast=false
project: infrastructure
sources:
- chart: vault
repoURL: https://helm.releases.hashicorp.com
targetRevision: 0.28.0
helm:
values: |
server:
enabled: true
priorityClassName: system-node-critical
affinity: {}
service:
enabled: true
active:
enabled: true
annotations: {}
standby:
enabled: true
instanceSelector:
enabled: false
ingress:
enabled: true
annotations:
kubernetes.io/ingress.class: nginx
ingressClassName: nginx
pathType: Prefix
activeService: true
hosts:
- host: vault.local.io
hostNetwork: false
readinessProbe:
enabled: false
standalone:
enabled: false
dataStorage:
enabled: true
size: 10Gi
mountPath: "/vault/data"
storageClass: microk8s-hostpath
accessMode: ReadWriteOnce
ha:
enabled: true
replicas: 3
raft:
enabled: true
setNodeId: true
config: |
ui = true
listener "tcp" {
tls_disable = 1
address = "[::]:8200"
cluster_address = "[::]:8201"
}
storage "raft" {
path = "/vault/data"
}
service_registration "kubernetes" {}
ui:
enabled: true
publishNotReadyAddresses: true
activeVaultPodOnly: false
serviceType: "ClusterIP"
serviceNodePort: null
externalPort: 8200
targetPort: 8200
config: |
ui = true
listener "tcp" {
tls_disable = 1
address = "[::]:8200"
cluster_address = "[::]:8201"
}
storage "file" {
path = "/vault/data"
}
destination:
server: https://kubernetes.default.svc
namespace: hcp-vault
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment