update values to use gcpkms key for auto-unseal
This commit is contained in:
parent
678c50bb72
commit
3b31f76981
1 changed files with 13 additions and 0 deletions
13
values.yaml
13
values.yaml
|
@ -77,6 +77,11 @@ consulHA:
|
||||||
# By default no direct resource request is made.
|
# By default no direct resource request is made.
|
||||||
resources: {}
|
resources: {}
|
||||||
|
|
||||||
|
# updatePartition is used to control a careful rolling update of Vault
|
||||||
|
# servers. This should be done particularly when changing the version
|
||||||
|
# of Vault. Please refer to the documentation for more information.
|
||||||
|
updatePartition: 0
|
||||||
|
|
||||||
# config is a raw string of default configuration when using a Stateful
|
# config is a raw string of default configuration when using a Stateful
|
||||||
# deployment. Default is to use a PersistentVolumeClaim mounted at /vault/data
|
# deployment. Default is to use a PersistentVolumeClaim mounted at /vault/data
|
||||||
# and store data there. This is only used when using a Replica count of 1, and
|
# and store data there. This is only used when using a Replica count of 1, and
|
||||||
|
@ -95,6 +100,14 @@ consulHA:
|
||||||
address = "HOST_IP:8500"
|
address = "HOST_IP:8500"
|
||||||
}
|
}
|
||||||
|
|
||||||
|
seal "gcpckms" {
|
||||||
|
#credentials = "/usr/vault/vault-project-user-creds.json"
|
||||||
|
project = "vault-helm-dev"
|
||||||
|
region = "global"
|
||||||
|
key_ring = "vault-helm"
|
||||||
|
crypto_key = "vault-init"
|
||||||
|
}
|
||||||
|
|
||||||
# Configuration for DNS configuration within the Kubernetes cluster.
|
# Configuration for DNS configuration within the Kubernetes cluster.
|
||||||
# This creates a service that routes to all agents (client or server)
|
# This creates a service that routes to all agents (client or server)
|
||||||
# for serving DNS requests. This DOES NOT automatically configure kube-dns
|
# for serving DNS requests. This DOES NOT automatically configure kube-dns
|
||||||
|
|
Loading…
Reference in a new issue