61 lines
1012 B
YAML
61 lines
1012 B
YAML
global:
|
|
enabled: true
|
|
|
|
server:
|
|
# ha:
|
|
# enabled: true
|
|
# config: |
|
|
# ui = true
|
|
|
|
# listener "tcp" {
|
|
# address = "[::]:8200"
|
|
# cluster_address = "[::]:8201"
|
|
# }
|
|
|
|
# storage "file" {
|
|
# path = "/vault/data"
|
|
# }
|
|
|
|
# raft:
|
|
# enabled: true
|
|
|
|
standalone:
|
|
enabled: true
|
|
config: |
|
|
ui = true
|
|
|
|
listener "tcp" {
|
|
tls_disable = 1
|
|
address = "[::]:8200"
|
|
cluster_address = "[::]:8201"
|
|
}
|
|
storage "file" {
|
|
path = "/vault/data"
|
|
}
|
|
|
|
dataStorage:
|
|
enabled: true
|
|
size: 32Gi
|
|
storageClass: null
|
|
accessMode: ReadWriteOnce
|
|
|
|
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
kubernetes.io/ingress.class: nginx
|
|
hosts:
|
|
- host: vault.ducoterra.net
|
|
paths:
|
|
- /
|
|
|
|
tls:
|
|
- hosts:
|
|
- vault.ducoterra.net
|
|
secretName: vault-tls-cert
|
|
|
|
ui:
|
|
enabled: true
|
|
serviceType: ClusterIP
|