diff --git a/infra/argocd/templates/vault.yaml b/infra/argocd/templates/vault.yaml new file mode 100644 index 0000000..3c1ae11 --- /dev/null +++ b/infra/argocd/templates/vault.yaml @@ -0,0 +1,21 @@ +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: vault + namespace: argocd +spec: + project: default + source: + repoURL: https://gitlab.com/developerdurp/homelab.git + targetRevision: main + path: infra/vault + destination: + namespace: vault + name: in-cluster + syncPolicy: + automated: + prune: true + selfHeal: true + syncOptions: + - CreateNamespace=true + diff --git a/infra/vault/Chart.yaml b/infra/vault/Chart.yaml new file mode 100644 index 0000000..e52029e --- /dev/null +++ b/infra/vault/Chart.yaml @@ -0,0 +1,12 @@ +apiVersion: v2 +name: vault +description: A Helm chart for Kubernetes +type: application +version: 0.0.1 +appVersion: 0.0.1 + +dependencies: +- name: vault + repository: https://helm.releases.hashicorp.com + version: 0.29.1 + diff --git a/infra/vault/values.yaml b/infra/vault/values.yaml new file mode 100644 index 0000000..0fceb68 --- /dev/null +++ b/infra/vault/values.yaml @@ -0,0 +1,25 @@ +vault: + server: + image: + repository: "hashicorp/vault" + pullPolicy: Always + + affinity: "" + ha: + enabled: true + replicas: 3 + raft: + enabled: true + setNodeId: true + config: | + cluster_name = "vault-integrated-storage" + storage "raft" { + path = "/vault/data/" + } + + listener "tcp" { + address = "[::]:8200" + cluster_address = "[::]:8201" + tls_disable = "true" + } + service_registration "kubernetes" {}