76 Commits
Author SHA1 Message Date
Matt Farina 1a46284990 [incubator/vault] deprecating chart (#24277)
Signed-off-by: Matt Farina <matt@mattfarina.com>
2020-11-13 17:28:48 +01:00
Janusz BialyandMatt Farina ecd0d4266b Bump vault version (#23845)
* bump to latest vault version

Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>

* bump version

Signed-off-by: Matt Farina <matt@mattfarina.com>

Co-authored-by: Matt Farina <matt@mattfarina.com>
2020-11-10 06:28:39 -08:00
Scott Rigby 709653c620 [incubator/vault] add repo archive notice (#24069)
Signed-off-by: Scott Rigby <scott@r6by.com>
2020-11-09 14:22:25 -08:00
Adam HamsikandMarian Soltys cc9d39c142 [incubator/vault] Add ability to configure liveness/readiness probe tresholds. (#23282)
Signed-off-by: Adam Hamsik <adam.hamsik@lablabs.io>

Co-authored-by: Marian Soltys <msoltys@pixelfederation.com>
2020-07-24 07:46:22 -07:00
Yong Wen Chua 00680bf8b0 [incubator/vault] Support additional selector for Vault service (#20995)
* [incubator/vault] Support additional selector for Vault service

Signed-off-by: Yong Wen Chua <lawliet89@users.noreply.github.com>

* Fix typo

Signed-off-by: Yong Wen Chua <lawliet89@users.noreply.github.com>
2020-02-27 17:32:38 -08:00
Daniel Grove 025bd2abb5 [incubator/valut] Fix path to use root prefix (#19143)
Since path is used within a range and not defined within the range, the
root prefix '$' has to be used.

Signed-off-by: Danny Grove <danny@drgrovellc.com>
2019-11-25 23:45:10 -08:00
Victor-Emmanuel Fourneau b30b2fc25f Adding path option to vault ingress (#19085)
Signed-off-by: Victor-Emmanuel Fourneau <ve.fourneau@linkbynet.com>
2019-11-25 07:54:06 -08:00
foosinn ec61610d90 [incubator/vault] update storage default value to fix helm warnings (#18945)
Signed-off-by: Stefan Schwarz <ssz@bitsbeats.com>
2019-11-18 06:11:41 -08:00
Janusz Bialy 3d51a3dabb remove predefined TLS ciphers (#18864)
Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>
2019-11-15 01:15:42 -08:00
Janusz Bialy 49d8d6adb9 [incubator/vault] Api version backwards compatibility (#18378)
* adds compatibility for deployment api version

Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>

* adds backwards compatibility for ingress api version

Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>

* adds function to determine networkPolicy api version

Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>

* bump Chart version

Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>
2019-10-27 23:49:25 -07:00
Yong Wen Chua baa2f7f74f [incubator/vault] Allow disabling of setting VAULT_API_ADDR (#18224)
* [incubator/vault] Allow disabling of setting `VAULT_API_ADDR` environment variables

Signed-off-by: Yong Wen Chua <lawliet89@users.noreply.github.com>

* Fix scheme for API address

Signed-off-by: Yong Wen Chua <lawliet89@users.noreply.github.com>

* Bump chart again

Signed-off-by: Yong Wen Chua <lawliet89@users.noreply.github.com>
2019-10-23 18:35:06 -07:00
Karl c0a5704b97 update values to fix helm warnings (#18243)
Signed-off-by: Karl Humma <karl.humma@qlik.com>
2019-10-23 11:07:04 -07:00
Janusz Bialy 2987b3b8b9 bump chart and vault versions (#18133)
Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>
2019-10-22 05:41:21 -07:00
mckjhd 2041861898 Fix service address in deployment (#17626)
Signed-off-by: Roman Galeev <roman_galeev@mckinsey.com>
2019-10-05 15:37:11 -07:00
Alan Tang f6fa8f77fe [incubator/vault] Update readme for missed nodeSelector and tolerations (#17698)
Signed-off-by: Alan Tang <alantang888@users.noreply.github.com>
2019-10-04 17:47:20 -07:00
zdevi be880e80a0 [incubator/vault] Custom backend (#17448)
* custom_backend

Signed-off-by: Stephane Etjemesian <setjemesian@synalabs.com>

* Update Chart.yaml

Signed-off-by: Stephane Etjemesian <setjemesian@synalabs.com>

* Update values.yaml

Signed-off-by: Stephane Etjemesian <setjemesian@synalabs.com>

* update readme

Signed-off-by: Stephane Etjemesian <setjemesian@synalabs.com>
2019-10-02 06:13:08 -07:00
Rafael Grigorian 6a556ca8e5 [incubator-vault] Fixes compatibility with 1.16 (#17324)
Notice of deprecation: https://kubernetes.io/blog/2019/07/18/api-deprecations-in-1-16

Signed-off-by: Rafael Grigorian <me@raffi.io>
2019-09-20 17:39:26 -07:00
AlexDouze 0588028a90 [incubator/vault] Add support for prometheus operator (#17112)
* [incubator/vault] Add support for prometheus operator

Signed-off-by: Alexandre Ledit <alexandre.ledit@easymile.com>

* [incubator/vault] Fix README example

Signed-off-by: Alexandre Ledit <alexandre.ledit@easymile.com>

* [incubator/vault] Extract serviceMonitor and prometheusRules configs from vaultExporter

Signed-off-by: Alexandre Ledit <alexandre.ledit@easymile.com>

* [incubator/vault] Fix README example

Signed-off-by: Alexandre Ledit <alexandre.ledit@easymile.com>
2019-09-17 12:03:49 -07:00
Mikhail Naletov a3932c0097 Use fullname in case of release name is vault (#16607)
Signed-off-by: Mikhail Naletov <okgolove@markeloff.net>
2019-08-27 06:26:42 -07:00
Dinesh Kumar dcbe829deb Add vault api address for non dev setup (#15991)
Signed-off-by: Dinesh Kumar <dinesh.kumar@go-jek.com>
2019-08-21 11:14:32 -07:00
Alexander Charykov 4b2992c6ab Start consul agent container before vault (#16201)
If vault container has lifecycle postStart script which is waiting for vault to startup
and vault is configured to use Consul Agent then this postStart would never finish successfully.

Specifing consulAgent container before vault will fix this deadlock.

Signed-off-by: Alexander Charykov <monester@gmail.com>
2019-08-15 13:28:35 -07:00
rosteroster 0648bac82c support annotations for Vault service account (#15950)
Signed-off-by: Brian Surber <bsurber120@yahoo.com>
2019-07-29 10:33:56 -07:00
Ori Rawlings 1c5fbe0e56 [incubator/vault] Allow additional arguments for vault server command (#15464)
* [incubator/vault] Allow additional arguments for vault server command

Signed-off-by: Ori Rawlings <orawlings@egencia.com>

* [incubator/vault] Bump chart version

Signed-off-by: Ori Rawlings <orawlings@egencia.com>

* [incubator/vault] Bump chart version

Signed-off-by: Ori Rawlings <orawlings@egencia.com>

* [incubator/vault] Rename vault.args to vault.extraArgs

Signed-off-by: Ori Rawlings <orawlings@egencia.com>
2019-07-12 14:27:06 -07:00
Aravind Valkodai e00bbe31da [incubator/vault] Fix namespace (#15461)
* Add the correct namespace.

Signed-off-by: Aravind Valkodai <Aravind.Valkodai@qlik.com>

* Add the correct namespace.

Signed-off-by: Aravind Valkodai <Aravind.Valkodai@qlik.com>
2019-07-11 11:33:07 -07:00
Aravind Valkodai 2a3f736d4c [incubator/vault] Add RBAC to vault. (#14344)
* Add RBAC to vault.

Signed-off-by: Aravind Valkodai <Aravind.Valkodai@qlik.com>

* Add RBAC to vault.

Signed-off-by: Aravind Valkodai <Aravind.Valkodai@qlik.com>

* Updates to RBAC to use create instead of enabled,

Signed-off-by: Aravind Valkodai <Aravind.Valkodai@qlik.com>

* Bump chart version

Signed-off-by: Aravind Valkodai <Aravind.Valkodai@qlik.com>

* Enabling serviceAccount to be enabled by default.

Signed-off-by: Aravind Valkodai <Aravind.Valkodai@qlik.com>
2019-07-10 13:12:26 -07:00
Janusz Bialy 4f10582e69 [incubator/vault] Fix serviceAccount reference and resource limits (#14895)
* add sa name to deployment

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* move vault container specific resources before any extra containers

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* bump chart version

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* bump version

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* update readme

Signed-off-by: Janusz Bialy <jbialy@gmail.com>
2019-06-27 20:31:21 -07:00
Janusz Bialy 0bb55ee5e6 [incubator/vault] Update owners (#14896)
* adding myself to OWNERS

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* bump version

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* get rid of whitespace

Signed-off-by: Janusz Bialy <jbialy@gmail.com>
2019-06-27 00:49:21 -07:00
Yong Wen Chua 71058d5c14 [incubator/vault] Add priorityClassName for pods and minReadySeconds for deployment (#12562)
* [incubator/vault] Add priorityClassName for pods

Signed-off-by: Yong Wen Chua <lawliet89@users.noreply.github.com>

* Add minReadySeconds

Signed-off-by: Yong Wen Chua <lawliet89@users.noreply.github.com>
2019-06-04 08:39:14 -07:00
Grant Saunders bc8816599b Fix liveness & readiness probes (#14108)
Signed-off-by: Grant Saunders <saundersg@dnb.com>
2019-06-04 06:39:04 -07:00
rosteroster f5fbe12df1 [incubator/vault] parse extraContainers using tpl, to match extraInitContainers, & miscellaneous value type fixes (#13509)
* parse extraContainers using tpl, to match extraInitContainers

Signed-off-by: Brian Surber <bsurber120@yahoo.com>

* Version bump

Signed-off-by: Brian Surber <bsurber120@yahoo.com>

* toYaml & tpl (#1)

* use toYaml with all tpls to allow for map object values instead of raw strings

Signed-off-by: Brian Surber <bsurber120@yahoo.com>

* change value types to match no longer needing to be strings

Signed-off-by: Brian Surber <bsurber120@yahoo.com>

* resolve version conflict

Signed-off-by: Maor Friedman <maor.friedman@redhat.com>
2019-05-15 02:26:21 -07:00
Reid Stuberg c38b005d5a Signed-off-by: rstuberg <rstuberg@infoblox.com> (#12841)
* Signed-off-by: rstuberg <rstuberg@infoblox.com>

 Changes to be committed:
	modified:   ingress.yaml
This changes the ingress to externalPort not port which is internal to the container.

* Signed-off-by: rstuberg <rstuberg@infoblox.com>
Bumped chart version
2019-05-07 15:46:34 -07:00
Janusz Bialy 75a5e1e2d7 [incubator/vault] Fix setting serviceaccount label (#13371)
* set chart label based on the chart name and version

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* bump chart version

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* Add a vault.chart function that can be used to define labels

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* add scope

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* Bumping chart version

Signed-off-by: Matt Farina <matt@mattfarina.com>
2019-04-30 08:53:39 -07:00
boxboatmatt aa13c0e034 Add the ability to specify pod labels (#11201)
Signed-off-by: Matthew DeVenny <matt@boxboat.com>
2019-04-29 12:05:35 -07:00
Cyrille De Ciancio 530638cd87 [incubator/vault] Use single consul token for vault and consul agent (#12844)
* Use single consul token for vault and consul agent

Signed-off-by: Cyrille <cyrille@omise.co>

* Bump version

Signed-off-by: Cyrille <cyrille@omise.co>
2019-04-28 04:54:20 -07:00
Cyrille De Ciancio a5b16939eb Enable resources for consul-agent container (#13157)
Signed-off-by: Cyrille <cyrille@omise.co>
2019-04-25 01:32:48 -07:00
Janusz Bialy f1416a2c2e [incubator/vault] Add support for creating a service account (#9429)
* option for creating a service account

Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>

* bump chart version

Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>
2019-04-22 08:19:44 -07:00
Michael Raimondi b25b00903b allow extra volumes to be mounted (#9250)
* allow extra volumes to be mounted

Signed-off-by: Michael Raimondi <mike@mikeraimondi.com>

* remove customSecrets and replace with comment in extraVolumeMounts

Custom secrets can be mounted into the pod using extraVolumeMounts.

Signed-off-by: Michael Raimondi <mike@mikeraimondi.com>

* Remove remaining reference to customSecret and update comment

Signed-off-by: Michael Raimondi <mike@mikeraimondi.com>

* bump minor version

Signed-off-by: Michael Raimondi <mike@mikeraimondi.com>

* re-increment Chart version

Signed-off-by: Michael Raimondi <mike@mikeraimondi.com>

* add info for migrating custom secrets

Signed-off-by: Michael Raimondi <mike@mikeraimondi.com>
2019-04-22 06:33:45 -07:00
dimitrigraf 32c64bd65e Add optional vault exporter for Prometheus. (#11185)
Signed-off-by: Dimitri Graf <dgraf@protonmail.ch>
2019-04-21 10:21:45 -07:00
Janusz Bialy 0df6fe98f5 [incubator/vault] Fix liveness check when vault is sealed or uninitialized (#12043)
* expect successful response if uninitialized or sealed for liveness check

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* bump chart version

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* bump chart ver

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* liveness check should pass if vault is sealed

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* vault should be considered alive if sealed and uninitilized

Signed-off-by: Janusz Bialy <jbialy@gmail.com>
2019-03-24 07:17:06 -07:00
Denis Baryshev 1cd1614c59 [incubator/vault] tolerations and nodeSelector (#11616)
* [incubator/vault] tolerations and nodeSelector

Signed-off-by: Denis Baryshev <dennybaa@gmail.com>

* [incubator/vault] liveness and readiness improvements

Signed-off-by: Denis Baryshev <dennybaa@gmail.com>

* Bump minor version for new features

Signed-off-by: Reinhard Nägele <unguiculus@gmail.com>
2019-03-14 09:28:27 -07:00
Alex Vorona 0b7c12ed03 Vault fix antiaffinity (#12139)
* fix antiaffinity label to label used with deployment

Signed-off-by: Aleksandr Vorona <av@arilot.com>

* Chart Version bumped

Signed-off-by: Aleksandr Vorona <av@arilot.com>
2019-03-13 18:21:12 -07:00
Janusz Bialy 0ecd993f6a [incubator/vault] Use httpGet instead of TCP Socket for liveness check (#9462)
* use httpGet instead of TCP socket

Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>

* bump chart version

Signed-off-by: Janusz Bialy <jbialy@gmail.com>
2019-03-07 08:17:02 -08:00
Louise Champ 5cf6c3af10 [incubator/vault] allow usage of config in existing configmap (#11952)
* allow usage of config in existing configmap

Signed-off-by: Louise Champ <louise@livewyer.com>

* reformat comments

Signed-off-by: Louise Champ <louise@livewyer.com>

* Bumping chart version

Signed-off-by: Matt Farina <matt@mattfarina.com>
2019-03-07 08:07:10 -08:00
Michael Raimondi 0ee4fc6f21 [incubator/vault] allow extra init containers to be added (#9249)
* allow extra init containers to be added

Signed-off-by: Michael Raimondi <mike@mikeraimondi.com>

* fix extraInitContainers default to be `{}`

Signed-off-by: Paul Czarkowski <username.taken@gmail.com>

* document default of extraInitContainers to be `{}`

Signed-off-by: Paul Czarkowski <username.taken@gmail.com>
2019-03-07 07:51:03 -08:00
CharlieC3 fbeb5f84b1 Vault: Adding ability to open cluster ip in k8s service (#8054)
* Vault: Adding ability to open cluster ip in k8s service

Signed-off-by: Charles Cantoni <charles.cantoni@gmail.com>

* Adding conditional block around exposing the cluster port

Signed-off-by: ccantoni <ccantoni@secureauth.com>

* Bumping chart version

Signed-off-by: ccantoni <ccantoni@secureauth.com>
2019-02-14 11:32:12 -08:00
Yong Wen Chua ef15c3291d [incubator/vault] Add checksum/config annotation to pods (#11321)
* Add `checksum/config` annotation to pods

Signed-off-by: Yong Wen Chua <lawliet89@users.noreply.github.com>

* Fix annotations rendering issues

Signed-off-by: Yong Wen Chua <lawliet89@users.noreply.github.com>
2019-02-12 12:55:23 -08:00
Cyrill Troxler fd37371d69 Add loadBalancerIP to configure static LB IP (#11065)
Signed-off-by: Cyrill Troxler <cyrill.troxler@nine.ch>
2019-02-03 09:53:06 -08:00
Dave Henderson 984997d6c6 incubator/vault: Adding support for extra deployment labels (#8898)
Signed-off-by: Dave Henderson <dhenderson@gmail.com>
2019-01-15 18:51:37 -08:00
Varsha Varadarajan 8844e7865a [incubator/vault] Bump up appVersion, default vault's image tag to appVersion, update consul's image tag. (#10513)
Signed-off-by: Varsha Varadarajan <varshasvaradarajan@gmail.com>
2019-01-11 20:15:02 -08:00
Warren Fernandes 9a27379007 Removes path specification from ingress service (#6720)
* Removes path specification from ingress service

Fixes kubernetes/charts#6719
Bump vault chart version to 0.14.3

Signed-off-by: Warren Fernandes <warren.f.fernandes@gmail.com>

* Update Chart.yaml

Signed-off-by: Reinhard Nägele <unguiculus@gmail.com>
2018-12-19 02:34:32 -08:00