openbao-helm/templates/ui-service.yaml

{{ template "vault.mode" . }}
{{- if ne .mode "external" }}
{{- template "vault.uiEnabled" . -}}
{{- if .uiEnabled -}}

apiVersion: v1
kind: Service
metadata:
  name: {{ template "vault.fullname" . }}-ui
  namespace: {{ .Release.Namespace }}
  labels:
    helm.sh/chart: {{ include "vault.chart" . }}
    app.kubernetes.io/name: {{ include "vault.name" . }}-ui
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/managed-by: {{ .Release.Service }}
  {{- template "vault.ui.annotations" . }}
spec:
  selector:
    app.kubernetes.io/name: {{ include "vault.name" . }}
    app.kubernetes.io/instance: {{ .Release.Name }}
    component: server
    {{- if and (.Values.ui.activeVaultPodOnly) (eq .mode "ha") }}
    vault-active: "true"
    {{- end }}
  publishNotReadyAddresses: {{ .Values.ui.publishNotReadyAddresses }}
  ports:
    - name: {{ include "vault.scheme" . }}
      port: {{ .Values.ui.externalPort }}
      targetPort: {{ .Values.ui.targetPort }}
      {{- if .Values.ui.serviceNodePort }}
      nodePort: {{ .Values.ui.serviceNodePort }}
      {{- end }}
  type: {{ .Values.ui.serviceType }}
  {{- include "service.externalTrafficPolicy" .Values.ui }}
  {{- include "service.loadBalancer" .Values.ui }}
{{- end -}}
{{- end }}
Support UI service annotations (#19) * support ui service annotations * Update templates/ui-service.yaml Co-Authored-By: Dat Truong <mr.anhdat@gmail.com> * fix service annotation indent and write unit tests 2019-08-16 15:59:51 +00:00			`{{ template "vault.mode" . }}`
Added support for external vault (#207) Uses Values.injector.externalVaultAddr to control the vault address env variable and server yaml rendering. If injector.externalVaultAddr is empty, both the injector and vault are deployed, with the injector using the local vault. If injector.externalVaultAddr is not empty, only the injector is deployed, and it uses the vault at the address specified in injector.externalVaultAddr. 2020-02-21 16:16:33 +00:00			`{{- if ne .mode "external" }}`
VAULT-571 Matching documented behavior and consul (#703) VAULT-571 Matching documented behavior and consul Consul's helm template defaults most of the enabled to the special value `"-"`, which means to inherit from global. This is what is implied should happen in Vault as well according to the documentation for the helm chart: > [global.enabled] The master enabled/disabled configuration. If this is > true, most components will be installed by default. If this is false, > no components will be installed by default and manually opting-in is > required, such as by setting server.enabled to true. (https://www.vaultproject.io/docs/platform/k8s/helm/configuration#enabled) We also simplified the chart logic using a few template helpers. Co-authored-by: Theron Voran <tvoran@users.noreply.github.com> 2022-03-21 16:50:23 +00:00			`{{- template "vault.uiEnabled" . -}}`
			`{{- if .uiEnabled -}}`

Initial commit 2018-08-18 05:08:03 +00:00			`apiVersion: v1`
			`kind: Service`
			`metadata:`
remove unused files, a lot of s/Consul/Vault 2018-09-28 20:56:48 +00:00			`name: {{ template "vault.fullname" . }}-ui`
add namespace in vault manifest definition (#38) 2019-08-28 13:58:48 +00:00			`namespace: {{ .Release.Namespace }}`
Initial commit 2018-08-18 05:08:03 +00:00			`labels:`
Update helm labels (#8) 2019-08-07 18:55:32 +00:00			`helm.sh/chart: {{ include "vault.chart" . }}`
Use correct name label for UI Service object (#30) 2019-08-21 14:06:05 +00:00			`app.kubernetes.io/name: {{ include "vault.name" . }}-ui`
Update helm labels (#8) 2019-08-07 18:55:32 +00:00			`app.kubernetes.io/instance: {{ .Release.Name }}`
			`app.kubernetes.io/managed-by: {{ .Release.Service }}`
Support UI service annotations (#19) * support ui service annotations * Update templates/ui-service.yaml Co-Authored-By: Dat Truong <mr.anhdat@gmail.com> * fix service annotation indent and write unit tests 2019-08-16 15:59:51 +00:00			`{{- template "vault.ui.annotations" . }}`
Initial commit 2018-08-18 05:08:03 +00:00			`spec:`
			`selector:`
fix ui service selector (#15) 2019-08-12 14:04:08 +00:00			`app.kubernetes.io/name: {{ include "vault.name" . }}`
			`app.kubernetes.io/instance: {{ .Release.Name }}`
setup templates for proper name prefixing 2018-08-18 21:38:33 +00:00			`component: server`
Add configuration options for Vault UI service (#285) * Add configuration options for Vault UI service - Configure to select active Vault pod only - Configure to not publish unready address * Create active label only on HA 2020-08-20 18:39:46 +00:00			`{{- if and (.Values.ui.activeVaultPodOnly) (eq .mode "ha") }}`
			`vault-active: "true"`
			`{{- end }}`
			`publishNotReadyAddresses: {{ .Values.ui.publishNotReadyAddresses }}`
Initial commit 2018-08-18 05:08:03 +00:00			`ports:`
use port names that map to vault.scheme (#223) * use port names that map to vault.scheme * prefix internal/replication port names with vault.scheme * port names must be 'no more than 15 characters' * test vault server service port names are prefixed with vault scheme * test vault server statefulset port names are prefixed with vault scheme * test vault ui service port names are prefixed with vault scheme * formatting: replace double quote with single quote * uncomment accidentally-commented lines * always set internal port name to https-internal, since it is always https * prefix headless service internal port name with https 2020-04-13 15:48:23 +00:00			`- name: {{ include "vault.scheme" . }}`
feat: allow setting loadBalancerIP and externalPort for service-ui (#44) * feat: allow setting loadBalancerIP and externalPort for service-ui * test: remove tests with wrong value There is no `ui.service.enabled` field, `ui.enabled` is used to create the service and that is tested in line 29. * test: loadBalancerIP is used if set. 2019-09-06 14:27:31 +00:00			`port: {{ .Values.ui.externalPort }}`
Add UI targetPort option (#437) Use custom `targetPort` for UI service. See the usecase in https://github.com/hashicorp/vault-helm/issues/385#issuecomment-749560213 2021-05-25 14:20:23 +00:00			`targetPort: {{ .Values.ui.targetPort }}`
Add TLS support (#21) * Add Secret env vars * Add custom path for volume mounting * Add HTTPS support * Add test for tls * Simplify network setup * Make tls_disable true as default * Update values variable to camelCase 2019-08-20 15:40:47 +00:00			`{{- if .Values.ui.serviceNodePort }}`
			`nodePort: {{ .Values.ui.serviceNodePort }}`
			`{{- end }}`
feat: allow setting loadBalancerIP and externalPort for service-ui (#44) * feat: allow setting loadBalancerIP and externalPort for service-ui * test: remove tests with wrong value There is no `ui.service.enabled` field, `ui.enabled` is used to create the service and that is tested in line 29. * test: loadBalancerIP is used if set. 2019-09-06 14:27:31 +00:00			`type: {{ .Values.ui.serviceType }}`
Feat: add externalTrafficPolicy support (#626) - externalTrafficPolicy can be set for both the ui and server services. It is only supported for NodePort or LoadBalancer service types. 2021-10-18 13:45:52 +00:00			`{{- include "service.externalTrafficPolicy" .Values.ui }}`
			`{{- include "service.loadBalancer" .Values.ui }}`
Refactor chart for 1.0, add tests, update TF (#2) * Refactor chart for 1.0, add tests, update TF * Fix typo in helper comment * Add NOTES for post install instructions * Fix typo in NOTES * Fix replication port for enterprise * Change updateStrategy to OnDelete * Add icon * Remove cluster address from config * Update README, add contributing doc * Update README * Change HA replicas to 3 2019-07-31 18:26:12 +00:00			`{{- end -}}`
Add configuration options for Vault UI service (#285) * Add configuration options for Vault UI service - Configure to select active Vault pod only - Configure to not publish unready address * Create active label only on HA 2020-08-20 18:39:46 +00:00			`{{- end }}`