[incubator/vault] Custom backend (#17448)

* custom_backend

Signed-off-by: Stephane Etjemesian <setjemesian@synalabs.com>

* Update Chart.yaml

Signed-off-by: Stephane Etjemesian <setjemesian@synalabs.com>

* Update values.yaml

Signed-off-by: Stephane Etjemesian <setjemesian@synalabs.com>

* update readme

Signed-off-by: Stephane Etjemesian <setjemesian@synalabs.com>

incubator/vault/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 description: A Helm chart for Vault, a tool for managing secrets
 name: vault
-version: 0.21.1
+version: 0.21.2
 appVersion: 1.1.2
 home: https://www.vaultproject.io/
 icon: https://www.vaultproject.io/assets/images/mega-nav/logo-vault-0f83e3d2.svg

incubator/vault/README.md

@@ -52,6 +52,7 @@ The following table lists the configurable parameters of the Vault chart and the
 | `image.pullPolicy`                | Container pull policy                    | `IfNotPresent`                      |
 | `image.repository`                | Container image to use                   | `vault`                             |
 | `image.tag`                       | Container image tag to deploy            | `.Chart.appVersion`                            |
+| `vault.backendPolicy              | If custom backend needed                 | `{}`                                |
 | `vault.dev`                       | Use Vault in dev mode                    | true (set to false in production)   |
 | `vault.extraArgs`                 | Additional arguments for vault server command | `[]`                           |
 | `vault.extraEnv`                  | Extra env vars for Vault pods            | `{}`                                |

incubator/vault/templates/backend-config.yaml

@@ -0,0 +1,14 @@
+{{- if .Values.vault.backendPolicy -}}
+apiVersion: cloud.google.com/v1beta1
+kind: BackendConfig
+metadata:
+  namespace: {{ .Release.Namespace }}
+  name: {{ template "vault.fullname" . }}
+  labels:
+    app: {{ template "vault.name" . }}
+    chart: "{{ template "vault.chart" . }}"
+    release: "{{ .Release.Name }}"
+spec:
+  securityPolicy:
+    name: {{ .Values.vault.backendPolicy }}
+{{- end -}}

incubator/vault/values.yaml

@@ -278,6 +278,7 @@ vault:
       #   bucket: ""
       #   # Use a custom secret to mount this file.
       #   credentials_file: ""
+    backendPolicy:
 
 rbac:
    ## Enable RBAC