Delete fixtures
This commit is contained in:
Tom Proctor
parent
8f237e2b82
commit
17431ba9dd
2 changed files with 0 additions and 361 deletions
|
|
@ -1,178 +0,0 @@
|
||||||
## Top-Level Stanzas
|
|
||||||
|
|
||||||
Use these links to navigate to a particular top-level stanza.
|
|
||||||
|
|
||||||
- [`controller`](#h-controller)
|
|
||||||
- [`metricsService`](#h-metricsservice)
|
|
||||||
- [`defaultVaultConnection`](#h-defaultvaultconnection)
|
|
||||||
- [`defaultAuthMethod`](#h-defaultauthmethod)
|
|
||||||
- [`tests`](#h-tests)
|
|
||||||
|
|
||||||
## All Values
|
|
||||||
|
|
||||||
### controller ((#h-controller))
|
|
||||||
|
|
||||||
- `controller` ((#v-controller)) - Top level configuration for the vault secrets operator deployment.
|
|
||||||
This is comprised of a controller and a kube rbac proxy container.
|
|
||||||
|
|
||||||
- `replicas` ((#v-controller-replicas)) (`integer: 1`) - Set the number of replicas for the operator.
|
|
||||||
|
|
||||||
- `kubeRbacProxy` ((#v-controller-kuberbacproxy)) - Settings related to the kubeRbacProxy container. This container is an HTTP proxy for the
|
|
||||||
controller manager which performs RBAC authorization against the Kubernetes API using SubjectAccessReviews.
|
|
||||||
|
|
||||||
- `image` ((#v-controller-kuberbacproxy-image)) - Image sets the repo and tag of the kube-rbac-proxy image to use for the controller.
|
|
||||||
|
|
||||||
- `repository` ((#v-controller-kuberbacproxy-image-repository)) (`string: gcr.io/kubebuilder/kube-rbac-proxy`)
|
|
||||||
|
|
||||||
- `tag` ((#v-controller-kuberbacproxy-image-tag)) (`string: v0.11.0`)
|
|
||||||
|
|
||||||
- `resources` ((#v-controller-kuberbacproxy-resources)) (`map`) - Configures the default resources for the kube rbac proxy container.
|
|
||||||
For more information on configuring resources, see the K8s documentation:
|
|
||||||
https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
|
|
||||||
|
|
||||||
- `limits` ((#v-controller-kuberbacproxy-resources-limits))
|
|
||||||
|
|
||||||
- `cpu` ((#v-controller-kuberbacproxy-resources-limits-cpu)) (`string: 500m`)
|
|
||||||
|
|
||||||
- `memory` ((#v-controller-kuberbacproxy-resources-limits-memory)) (`string: 128Mi`)
|
|
||||||
|
|
||||||
- `requests` ((#v-controller-kuberbacproxy-resources-requests))
|
|
||||||
|
|
||||||
- `cpu` ((#v-controller-kuberbacproxy-resources-requests-cpu)) (`string: 5m`)
|
|
||||||
|
|
||||||
- `memory` ((#v-controller-kuberbacproxy-resources-requests-memory)) (`string: 64Mi`)
|
|
||||||
|
|
||||||
- `manager` ((#v-controller-manager)) - Settings related to the vault-secrets-operator container.
|
|
||||||
|
|
||||||
- `image` ((#v-controller-manager-image)) - Image sets the repo and tag of the vault-secrets-operator image to use for the controller.
|
|
||||||
|
|
||||||
- `repository` ((#v-controller-manager-image-repository)) (`string: hashicorp/vault-secrets-operator`)
|
|
||||||
|
|
||||||
- `tag` ((#v-controller-manager-image-tag)) (`string: 0.0.0-dev`)
|
|
||||||
|
|
||||||
- `resources` ((#v-controller-manager-resources)) (`map`) - Configures the default resources for the vault-secrets-operator container.
|
|
||||||
For more information on configuring resources, see the K8s documentation:
|
|
||||||
https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
|
|
||||||
|
|
||||||
- `limits` ((#v-controller-manager-resources-limits))
|
|
||||||
|
|
||||||
- `cpu` ((#v-controller-manager-resources-limits-cpu)) (`string: 500m`)
|
|
||||||
|
|
||||||
- `memory` ((#v-controller-manager-resources-limits-memory)) (`string: 128Mi`)
|
|
||||||
|
|
||||||
- `requests` ((#v-controller-manager-resources-requests))
|
|
||||||
|
|
||||||
- `cpu` ((#v-controller-manager-resources-requests-cpu)) (`string: 10m`)
|
|
||||||
|
|
||||||
- `memory` ((#v-controller-manager-resources-requests-memory)) (`string: 64Mi`)
|
|
||||||
|
|
||||||
- `controllerConfigMapYaml` ((#v-controller-controllerconfigmapyaml)) (`map`) - Sets the configuration settings used by the controller. Any custom changes will be reflected in the
|
|
||||||
data field of the configmap.
|
|
||||||
For more information on configuring resources, see the K8s documentation:
|
|
||||||
https://kubernetes.io/docs/concepts/configuration/configmap/
|
|
||||||
|
|
||||||
- `health` ((#v-controller-controllerconfigmapyaml-health))
|
|
||||||
|
|
||||||
- `healthProbeBindAddress` ((#v-controller-controllerconfigmapyaml-health-healthprobebindaddress)) (`string: :8081`)
|
|
||||||
|
|
||||||
- `leaderElection` ((#v-controller-controllerconfigmapyaml-leaderelection))
|
|
||||||
|
|
||||||
- `leaderElect` ((#v-controller-controllerconfigmapyaml-leaderelection-leaderelect)) (`boolean: true`)
|
|
||||||
|
|
||||||
- `resourceName` ((#v-controller-controllerconfigmapyaml-leaderelection-resourcename)) (`string: b0d477c0.hashicorp.com`)
|
|
||||||
|
|
||||||
- `metrics` ((#v-controller-controllerconfigmapyaml-metrics))
|
|
||||||
|
|
||||||
- `bindAddress` ((#v-controller-controllerconfigmapyaml-metrics-bindaddress)) (`string: 127.0.0.1:8080`)
|
|
||||||
|
|
||||||
- `webhook` ((#v-controller-controllerconfigmapyaml-webhook))
|
|
||||||
|
|
||||||
- `port` ((#v-controller-controllerconfigmapyaml-webhook-port)) (`integer: 9443`)
|
|
||||||
|
|
||||||
- `kubernetesClusterDomain` ((#v-controller-kubernetesclusterdomain)) (`string: cluster.local`) - Configures the environment variable KUBERNETES_CLUSTER_DOMAIN used by KubeDNS.
|
|
||||||
|
|
||||||
### metricsService ((#h-metricsservice))
|
|
||||||
|
|
||||||
- `metricsService` ((#v-metricsservice)) (`map`) - Configure the metrics service ports used by the metrics service.
|
|
||||||
Set the configuration fo the metricsService port.
|
|
||||||
|
|
||||||
- `ports` ((#v-metricsservice-ports)) (`map`) - Set the port settings for the metrics service.
|
|
||||||
For more information on configuring resources, see the K8s documentation:
|
|
||||||
https://kubernetes.io/docs/concepts/services-networking/service/
|
|
||||||
|
|
||||||
- `name` ((#v-metricsservice-ports-name)) (`string: https`)
|
|
||||||
|
|
||||||
- `port` ((#v-metricsservice-ports-port)) (`integer: 8443`)
|
|
||||||
|
|
||||||
- `protocol` ((#v-metricsservice-ports-protocol)) (`string: TCP`)
|
|
||||||
|
|
||||||
- `targetPort` ((#v-metricsservice-ports-targetport)) (`string: https`)
|
|
||||||
|
|
||||||
- `type` ((#v-metricsservice-type)) (`string: ClusterIP`)
|
|
||||||
|
|
||||||
### defaultVaultConnection ((#h-defaultvaultconnection))
|
|
||||||
|
|
||||||
- `defaultVaultConnection` ((#v-defaultvaultconnection)) - Configures the default VaultConnection CR which will be used by resources
|
|
||||||
if they do not specify a VaultConnection reference. The name is 'default' and will
|
|
||||||
always be installed in the same namespace as the operator.
|
|
||||||
|
|
||||||
- `enabled` ((#v-defaultvaultconnection-enabled)) (`boolean: false`) - toggles the deployment of the VaultAuthMethod CR
|
|
||||||
|
|
||||||
- `address` ((#v-defaultvaultconnection-address)) (`string: http://vault.default.svc.cluster.local:8200`) - Address of the Vault Server
|
|
||||||
|
|
||||||
- `caCertSecret` ((#v-defaultvaultconnection-cacertsecret)) (`string: ""`) - CACertSecret containing the trusted PEM encoded CA certificate chain.
|
|
||||||
Note: This secret must exist prior to deploying the CR.
|
|
||||||
|
|
||||||
- `tlsServerName` ((#v-defaultvaultconnection-tlsservername)) (`string: ""`) - TLSServerName to use as the SNI host for TLS connections.
|
|
||||||
|
|
||||||
- `skipTLSVerify` ((#v-defaultvaultconnection-skiptlsverify)) (`boolean: false`) - SkipTLSVerify for TLS connections.
|
|
||||||
|
|
||||||
- `headers` ((#v-defaultvaultconnection-headers)) (`string: ""`) - Headers to be included in all Vault requests.
|
|
||||||
headers: |
|
|
||||||
"vault-something1": "foo"
|
|
||||||
"vault-something2": "bar"
|
|
||||||
"vault-something3": "baz"
|
|
||||||
|
|
||||||
### defaultAuthMethod ((#h-defaultauthmethod))
|
|
||||||
|
|
||||||
- `defaultAuthMethod` ((#v-defaultauthmethod)) - Configures and deploys the default VaultAuthMethod CR which will be used by resources
|
|
||||||
if they do not specify a VaultAuthMethod reference. The name is 'default' and will
|
|
||||||
always be installed in the same namespace as the operator.
|
|
||||||
|
|
||||||
- `enabled` ((#v-defaultauthmethod-enabled)) (`boolean: false`) - toggles the deployment of the VaultAuthMethod CR
|
|
||||||
|
|
||||||
- `namespace` ((#v-defaultauthmethod-namespace)) (`string: default`) - Vault namespace for the VaultAuthMethod CR
|
|
||||||
|
|
||||||
- `method` ((#v-defaultauthmethod-method)) (`string: kubernetes`) - Vault Auth method to be used with the VaultAuthMethod CR
|
|
||||||
|
|
||||||
- `mount` ((#v-defaultauthmethod-mount)) (`string: kubernetes`) - Mount path for the Vault Auth Method.
|
|
||||||
|
|
||||||
- `kubernetes` ((#v-defaultauthmethod-kubernetes)) - Vault Kubernetes auth method specific configuration
|
|
||||||
|
|
||||||
- `role` ((#v-defaultauthmethod-kubernetes-role)) (`string: demo`) - Vault Auth Role to use
|
|
||||||
This is a required field and must be setup in Vault prior to deploying the helm chart
|
|
||||||
if `defaultAuthMethod.enabled=true`
|
|
||||||
TODO: mark required in the charts.
|
|
||||||
|
|
||||||
- `serviceAccount` ((#v-defaultauthmethod-kubernetes-serviceaccount)) (`string: default`) - Kubernetes ServiceAccount associated with the default Vault Auth Role
|
|
||||||
|
|
||||||
- `tokenAudiences` ((#v-defaultauthmethod-kubernetes-tokenaudiences)) (`array<string>: []`) - Token Audience is required and should match whatever the audience
|
|
||||||
of the vault kubernetes auth role has set.
|
|
||||||
|
|
||||||
- `params` ((#v-defaultauthmethod-params)) (`string: ""`) - Params to use when authenticating to Vault
|
|
||||||
params: |
|
|
||||||
"vault-something1": "foo"
|
|
||||||
"vault-something2": "bar"
|
|
||||||
"vault-something3": "baz"
|
|
||||||
|
|
||||||
- `headers` ((#v-defaultauthmethod-headers)) (`string: ""`) - Headers to be included in all Vault requests.
|
|
||||||
headers: |
|
|
||||||
"vault-something1": "foo"
|
|
||||||
"vault-something2": "bar"
|
|
||||||
"vault-something3": "baz"
|
|
||||||
|
|
||||||
### tests ((#h-tests))
|
|
||||||
|
|
||||||
- `tests` ((#v-tests)) - # Used by unit tests, and will not be rendered except when using `helm template`, this can be safely ignored.
|
|
||||||
|
|
||||||
- `enabled` ((#v-tests-enabled)) (`boolean: true`)
|
|
||||||
|
|
@ -1,183 +0,0 @@
|
||||||
# Copyright (c) HashiCorp, Inc.
|
|
||||||
# SPDX-License-Identifier: MPL-2.0
|
|
||||||
|
|
||||||
# Top level configuration for the vault secrets operator deployment.
|
|
||||||
# This is comprised of a controller and a kube rbac proxy container.
|
|
||||||
controller:
|
|
||||||
|
|
||||||
# Set the number of replicas for the operator.
|
|
||||||
# @type: integer
|
|
||||||
replicas: 1
|
|
||||||
|
|
||||||
# Settings related to the kubeRbacProxy container. This container is an HTTP proxy for the
|
|
||||||
# controller manager which performs RBAC authorization against the Kubernetes API using SubjectAccessReviews.
|
|
||||||
kubeRbacProxy:
|
|
||||||
# Image sets the repo and tag of the kube-rbac-proxy image to use for the controller.
|
|
||||||
image:
|
|
||||||
repository: gcr.io/kubebuilder/kube-rbac-proxy
|
|
||||||
tag: v0.11.0
|
|
||||||
|
|
||||||
# Configures the default resources for the kube rbac proxy container.
|
|
||||||
# For more information on configuring resources, see the K8s documentation:
|
|
||||||
# https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
|
|
||||||
# @recurse: true
|
|
||||||
# @type: map
|
|
||||||
resources:
|
|
||||||
limits:
|
|
||||||
cpu: 500m
|
|
||||||
memory: 128Mi
|
|
||||||
requests:
|
|
||||||
cpu: 5m
|
|
||||||
memory: 64Mi
|
|
||||||
|
|
||||||
# Settings related to the vault-secrets-operator container.
|
|
||||||
manager:
|
|
||||||
# Image sets the repo and tag of the vault-secrets-operator image to use for the controller.
|
|
||||||
image:
|
|
||||||
repository: hashicorp/vault-secrets-operator
|
|
||||||
tag: 0.0.0-dev
|
|
||||||
|
|
||||||
# Configures the default resources for the vault-secrets-operator container.
|
|
||||||
# For more information on configuring resources, see the K8s documentation:
|
|
||||||
# https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
|
|
||||||
# @recurse: true
|
|
||||||
# @type: map
|
|
||||||
resources:
|
|
||||||
limits:
|
|
||||||
cpu: 500m
|
|
||||||
memory: 128Mi
|
|
||||||
requests:
|
|
||||||
cpu: 10m
|
|
||||||
memory: 64Mi
|
|
||||||
|
|
||||||
# Sets the configuration settings used by the controller. Any custom changes will be reflected in the
|
|
||||||
# data field of the configmap.
|
|
||||||
# For more information on configuring resources, see the K8s documentation:
|
|
||||||
# https://kubernetes.io/docs/concepts/configuration/configmap/
|
|
||||||
# @recurse: true
|
|
||||||
# @type: map
|
|
||||||
controllerConfigMapYaml:
|
|
||||||
health:
|
|
||||||
healthProbeBindAddress: :8081
|
|
||||||
leaderElection:
|
|
||||||
leaderElect: true
|
|
||||||
resourceName: b0d477c0.hashicorp.com
|
|
||||||
metrics:
|
|
||||||
bindAddress: 127.0.0.1:8080
|
|
||||||
webhook:
|
|
||||||
port: 9443
|
|
||||||
|
|
||||||
# Configures the environment variable KUBERNETES_CLUSTER_DOMAIN used by KubeDNS.
|
|
||||||
# @type: string
|
|
||||||
kubernetesClusterDomain: cluster.local
|
|
||||||
|
|
||||||
|
|
||||||
# Configure the metrics service ports used by the metrics service.
|
|
||||||
# Set the configuration fo the metricsService port.
|
|
||||||
# @recurse: true
|
|
||||||
# @type: map
|
|
||||||
metricsService:
|
|
||||||
# Set the port settings for the metrics service.
|
|
||||||
# For more information on configuring resources, see the K8s documentation:
|
|
||||||
# https://kubernetes.io/docs/concepts/services-networking/service/
|
|
||||||
# @type: map
|
|
||||||
ports:
|
|
||||||
- name: https
|
|
||||||
port: 8443
|
|
||||||
protocol: TCP
|
|
||||||
targetPort: https
|
|
||||||
type: ClusterIP
|
|
||||||
|
|
||||||
# Configures the default VaultConnection CR which will be used by resources
|
|
||||||
# if they do not specify a VaultConnection reference. The name is 'default' and will
|
|
||||||
# always be installed in the same namespace as the operator.
|
|
||||||
defaultVaultConnection:
|
|
||||||
# toggles the deployment of the VaultAuthMethod CR
|
|
||||||
# @type: boolean
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
# Address of the Vault Server
|
|
||||||
# @type: string
|
|
||||||
address: http://vault.default.svc.cluster.local:8200
|
|
||||||
|
|
||||||
# CACertSecret containing the trusted PEM encoded CA certificate chain.
|
|
||||||
# Note: This secret must exist prior to deploying the CR.
|
|
||||||
# @type: string
|
|
||||||
caCertSecret: ""
|
|
||||||
|
|
||||||
# TLSServerName to use as the SNI host for TLS connections.
|
|
||||||
# @type: string
|
|
||||||
tlsServerName: ""
|
|
||||||
|
|
||||||
# SkipTLSVerify for TLS connections.
|
|
||||||
# @type: boolean
|
|
||||||
skipTLSVerify: false
|
|
||||||
|
|
||||||
# Headers to be included in all Vault requests.
|
|
||||||
# @type: string, eg:
|
|
||||||
# headers: |
|
|
||||||
# "vault-something1": "foo"
|
|
||||||
# "vault-something2": "bar"
|
|
||||||
# "vault-something3": "baz"
|
|
||||||
# @type: string
|
|
||||||
headers: ""
|
|
||||||
|
|
||||||
|
|
||||||
# Configures and deploys the default VaultAuthMethod CR which will be used by resources
|
|
||||||
# if they do not specify a VaultAuthMethod reference. The name is 'default' and will
|
|
||||||
# always be installed in the same namespace as the operator.
|
|
||||||
defaultAuthMethod:
|
|
||||||
# toggles the deployment of the VaultAuthMethod CR
|
|
||||||
# @type: boolean
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
# Vault namespace for the VaultAuthMethod CR
|
|
||||||
# @type: string
|
|
||||||
namespace: default
|
|
||||||
|
|
||||||
# Vault Auth method to be used with the VaultAuthMethod CR
|
|
||||||
# @type: string
|
|
||||||
method: kubernetes
|
|
||||||
|
|
||||||
# Mount path for the Vault Auth Method.
|
|
||||||
# @type: string
|
|
||||||
mount: kubernetes
|
|
||||||
|
|
||||||
# Vault Kubernetes auth method specific configuration
|
|
||||||
kubernetes:
|
|
||||||
# Vault Auth Role to use
|
|
||||||
# This is a required field and must be setup in Vault prior to deploying the helm chart
|
|
||||||
# if `defaultAuthMethod.enabled=true`
|
|
||||||
# TODO: mark required in the charts.
|
|
||||||
# @type: string
|
|
||||||
role: demo
|
|
||||||
|
|
||||||
# Kubernetes ServiceAccount associated with the default Vault Auth Role
|
|
||||||
# @type: string
|
|
||||||
serviceAccount: default
|
|
||||||
|
|
||||||
# Token Audience is required and should match whatever the audience
|
|
||||||
# of the vault kubernetes auth role has set.
|
|
||||||
# @type: array<string>
|
|
||||||
tokenAudiences: []
|
|
||||||
|
|
||||||
# Params to use when authenticating to Vault
|
|
||||||
# params: |
|
|
||||||
# "vault-something1": "foo"
|
|
||||||
# "vault-something2": "bar"
|
|
||||||
# "vault-something3": "baz"
|
|
||||||
# @type: string
|
|
||||||
params: ""
|
|
||||||
|
|
||||||
# Headers to be included in all Vault requests.
|
|
||||||
# headers: |
|
|
||||||
# "vault-something1": "foo"
|
|
||||||
# "vault-something2": "bar"
|
|
||||||
# "vault-something3": "baz"
|
|
||||||
# @type: string
|
|
||||||
headers: ""
|
|
||||||
|
|
||||||
## Used by unit tests, and will not be rendered except when using `helm template`, this can be safely ignored.
|
|
||||||
tests:
|
|
||||||
# @type: boolean
|
|
||||||
enabled: true
|
|
||||||
Loading…
Reference in a new issue