Michal.Wrobel/openbao-helm
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
541 commits 11 branches 48 tags 1.4 MiB
Commit graph

239 commits

Author SHA1 Message Date
Holden Omans
a0325cfd14 Configure pod probes (#104) 
* Added option for enabling a livenessprobe

* added option for using http for readinessProbe

* added tests
 2019-11-28 18:24:41 -05:00
Janusz Bialy
2ff7d47c07 Use a standard way to define the container image (#103) 
* use a standard way to define image repo and tag

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* add tests

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* bump chart version

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* Revert "bump chart version"

This reverts commit 74cbc984a7d4cf9098acf78977cdc8598c557550.

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* nest image block inside server

Signed-off-by: Janusz Bialy <jbialy@gmail.com>
 2019-11-28 17:39:28 -05:00
Shahbaz Nazir
faf5a84c5e Add possibility to run sidecars with vault (#87) 
* Add extra containers

* fix template

* add unit tests

* resolve conflicts

* remove duplicate docs

* fix unit tests
 2019-11-21 14:07:41 -05:00
Jason O'Donnell
3fbbf7b8df
Remove readOnlyRootFilesystem configurable (#110) 2019-11-12 19:55:31 -05:00
Sergii
ea0e66760f Add extra label to Ingress (#108) 2019-11-07 11:23:56 -05:00
Jason O'Donnell
a9e6a0a938
Add preStop lifecycle hook (#105) 
* Add preStop lifecycle hook

* Fix typo in comment
 2019-11-06 11:06:57 -05:00
Janusz Bialy
a2b2d32e92 Add support for image pull policy and secrets (#92) 
* add image pull policy and pull secrets

Signed-off-by: Janusz Bialy <jbialy@gmail.com>

* add unit tests

Signed-off-by: Janusz Bialy <jbialy@gmail.com>
 2019-10-24 12:58:32 -04:00
Jason O'Donnell
e1b89d6396
Make readOnlyRootFilesystem configurable (#93) 2019-10-24 12:40:19 -04:00
Yves Blusseau
75ceb1af5a Fix PodDisruptionBudget template (#88) 
* Fix bad selectors.
* Fix bad calculation of maxUnavailable.

Signed-off-by: JrCs <90z7oey02@sneakemail.com>
 2019-10-21 09:51:02 -04:00
Jason O'Donnell
b41d36c621
Require vault to run as non root (#80) 
* Require vault to run as non root

* Fix unit tests

* Make uid/gid configurable, remove home emptydir
 2019-10-18 12:42:25 -04:00
savagete2860
f7aa2576d0 Add load balancer source range for UI service (#83) 
* add load balancer source range for UI service

* add load balancer source range for UI service

* adding unit test

* adding unit test
 2019-10-18 12:41:53 -04:00
Jason O'Donnell
9fd0ad6e20
Fix audit storage mount in HA mode (#79) 
* Fix audit storage mount in HA mode

* Add explicit fsgroup
 2019-10-10 10:03:44 -04:00
Ryan Wholey
f957c52acc Add support for setting service type (#65) 2019-10-06 16:06:45 -04:00
StupidScience
c6adb89d4b added possibility to add extraLabels for server pod (#59) 2019-10-06 15:50:48 -04:00
Jason O'Donnell
d696408fae Allow annotations on ui dev service 2019-09-27 09:20:30 -07:00
Alejandro Garrido Mota
9dd6bad741 Support for ingress (#48) 
* Added ingress support

* Added small header with documentation about ingress

* Added unit tests
 2019-09-27 10:42:24 -05:00
Jeff Malnick
1773a5759d
Merge pull request #52 from mogaal/service-annotations 
Service annotations support
 2019-09-26 19:45:51 -07:00
Jason O'Donnell
09f56da548
Remove privileged, add mlock configurable (#50) 2019-09-23 01:11:04 -04:00
Alejandro Garrido Mota
865b98f55d Added support for service annotations 2019-09-11 16:39:25 +01:00
Arun Kumar
3f5b0b7b7e Changed vault service port and targetPort to values file (#43) 
* Changed vault service port and targetPort to values file

* Fixed typo in vaules, adding server-service changes and tests

* Changed port and targetPort to server.service
 2019-09-06 11:13:23 -04:00
Vincent Desjardins
2852fbba9b annotation configuration on service account (#47) 
Signed-off-by: Vincent Desjardins <vdesjardins@gmail.com>
 2019-09-06 10:48:12 -04:00
Alexander Schramm
5a64f9cc9e feat: allow setting loadBalancerIP and externalPort for service-ui (#44) 
* feat: allow setting loadBalancerIP and externalPort for service-ui

* test: remove tests with wrong value

There is no `ui.service.enabled` field, `ui.enabled` is used to create
the service and that is tested in line 29.

* test: loadBalancerIP is used if set.
 2019-09-06 10:27:31 -04:00
Sophian Mehboub
bb7ce9409b add namespace in vault manifest definition (#38) 2019-08-28 09:58:48 -04:00
Jason O'Donnell
0c86c6420a
Add privileged for mlock requirements (#35) 
* Add privilged for mlock requirements

* Update Chart version
 2019-08-22 16:32:30 -04:00
Miroslav E. Hadzhiev
4b12c39099 Address K8s Deprecation of Kubelet security controls. Remove Whitespaces. (#24) 2019-08-22 11:05:31 -04:00
Jason O'Donnell
a6c17ed48a
Remove step-down preStop (#31) 2019-08-21 17:34:31 -04:00
Sri Hari Vignesh
e99b03855c Correct volume indents (#28) 2019-08-21 11:15:47 -04:00
Dat Truong
54c7c34af7 Use correct name label for UI Service object (#30) 2019-08-21 10:06:05 -04:00
Jason O'Donnell
acd1638b28
Add VAULT_API_ADDR as environment var (#26) 2019-08-20 17:09:06 -04:00
Jason O'Donnell
abb2b6e56e
Remove version label from resources (#27) 2019-08-20 17:08:49 -04:00
Dat Truong
c0f5c7acc0 Add TLS support (#21) 
* Add Secret env vars

* Add custom path for volume mounting

* Add HTTPS support

* Add test for tls

* Simplify network setup

* Make tls_disable true as default

* Update values variable to camelCase
 2019-08-20 11:40:47 -04:00
Amos Kyler
e312f00a03 Support UI service annotations (#19) 
* support ui service annotations

* Update templates/ui-service.yaml

Co-Authored-By: Dat Truong <mr.anhdat@gmail.com>

* fix service annotation indent and write unit tests
 2019-08-16 11:59:51 -04:00
JoeStack
a049b48379 Update ui-service.yaml (#23) 
port 80 doesn't work in case of https. So the default behavior in all of our docs is to use <vault-ip>:8200
 2019-08-16 11:58:35 -04:00
Dat Truong
2154e341ea Add secret env vars and custom mounting path (#16) 
* Add Secret env vars

* Add custom path for volume mounting
 2019-08-14 16:29:07 -04:00
Alexandre Garcia
be6e58375b fix ui service selector (#15) 2019-08-12 10:04:08 -04:00
Alexandre Garcia
0b2218d1d9 Only include clusterIp on vault service if set in values (#12) 2019-08-12 09:57:56 -04:00
Jason O'Donnell
0b8aacb590
Add clusterrolebinding, fix service, update Vault (#10) 
* Add clusterrolebinding, fix service, update Vault

* Change authDelegator to false by default

* Clarify clusterIP comment
 2019-08-08 14:14:58 -04:00
Khris Richardson
bd02c9ba5f remove field only valid for pod from container securityContext (#9) 2019-08-07 19:23:51 -04:00
Jason O'Donnell
db571d8dda
Update helm labels (#8) 2019-08-07 14:55:32 -04:00
Jason O'Donnell
8e1bd927f2
Add tolerations, nodeselector and annotations (#5) 2019-08-05 12:31:06 -04:00
Jason O'Donnell
b7469914e2
Refactor chart for 1.0, add tests, update TF (#2) 
* Refactor chart for 1.0, add tests, update TF

* Fix typo in helper comment

* Add NOTES for post install instructions

* Fix typo in NOTES

* Fix replication port for enterprise

* Change updateStrategy to OnDelete

* Add icon

* Remove cluster address from config

* Update README, add contributing doc

* Update README

* Change HA replicas to 3
 2019-07-31 14:26:12 -04:00
Jason O'Donnell
ca40087add
Remove unused DNS service (#1) 2019-07-02 13:29:36 -04:00
Clint Shryock
0e61f4f581
add/update how disruption budget works 2018-12-03 11:30:50 -06:00
Clint Shryock
81b11691ae
add service disruption back for HA setup 2018-11-30 16:29:46 -06:00
Clint Shryock
dc808dc106
rename extra config file generated 2018-11-30 16:02:53 -06:00
Clint Shryock
66211943e8
update values, single-server and test 2018-11-27 15:45:32 -06:00
Clint Shryock
34e0b377d9
rename consulHA to serverHA; add dev mode, update config and values 2018-11-26 16:12:03 -06:00
Clint Shryock
666cdb75cc
add dev mode 2018-11-26 15:35:52 -06:00
Clint Shryock
bcc8a8db5f
re-add seperate config map file for single server. Update config/values and statefulsets. Add auto-unseal config to single server 2018-11-26 11:44:05 -06:00
Clint Shryock
678c50bb72
update config - only on HA for now, may need to split things out 2018-11-19 15:09:59 -06:00
Clint Shryock
b0944d48df
consolidate config-map 2018-11-19 14:49:30 -06:00
Clint Shryock
0d3280254c
update values, correct security spot for contianers 2018-11-16 16:46:29 -06:00
Clint Shryock
5a4c3e69b1
refactoring for statefulset 2018-11-16 16:34:10 -06:00
Clint Shryock
180ba0cd6c
rename deployment to stateful set; just the filename though 2018-11-16 16:08:17 -06:00
Clint Shryock
5d0ffcabe0
snapshot of dev before I switched tasks 2018-10-29 10:36:23 -05:00
Clint Shryock
9e8d74de04
Add stateless configuration. Assumes a consul deployed 2018-10-08 16:35:20 -05:00
Clint Shryock
a23a7982a9
add consul 
HA section
 2018-10-05 16:33:42 -05:00
Clint Shryock
061852089a
update 2018-10-05 16:12:32 -05:00
Clint Shryock
1decb83b97
remove for now 2018-10-05 16:11:52 -05:00
Clint Shryock
95024c4d3f
minor tweaks 2018-10-04 15:07:41 -05:00
Clint Shryock
d72a939a51
really ugly hack/slash proof-of-concept, forked from consul-helm 2018-10-02 16:14:57 -05:00
Clint Shryock
a2235339eb
remove unused files, a lot of s/Consul/Vault 2018-09-28 15:56:48 -05:00
Mitchell Hashimoto
71b899159c
add global.imageK8S for consul-k8s 2018-09-25 09:19:19 -05:00
Mitchell Hashimoto
560c461c9b
ability to specify prefix for catalog sync 2018-09-25 09:15:44 -05:00
Mitchell Hashimoto
f39ac481aa
syncCatalog templates 2018-09-22 16:06:24 -07:00
Maciek Misztal
febaab96fa #7 added an optional storageClass to the server-statefuset 2018-09-20 21:35:08 +02:00
Mitchell Hashimoto
52e069d67f
Fix up helm test to use the local client 2018-09-11 19:43:05 -07:00
Mitchell Hashimoto
9ef4efc5c4
client and server must export both TCP and UDP DNS ports 2018-09-11 19:09:45 -07:00
Mitchell Hashimoto
64670ed470
Add consul-dns service 2018-09-11 17:53:02 -07:00
Mitchell Hashimoto
2434fe5a43
clients support extraVolumes 2018-09-08 08:35:07 -07:00
Mitchell Hashimoto
2488f92a23
Support extraVolumes for server, will add for client soon 2018-09-08 08:28:13 -07:00
Mitchell Hashimoto
c9a5588264
Move datacenter to global 2018-09-08 07:52:31 -07:00
Mitchell Hashimoto
08ff19831a
support Values.client.resources 2018-09-08 07:50:23 -07:00
Mitchell Hashimoto
71e2fefc62
extraConfig support for consul clients 2018-09-08 07:41:54 -07:00
Mitchell Hashimoto
9d37c9f2f1
Support global.image value 2018-09-05 07:45:54 -07:00
Mitchell Hashimoto
f20934a89d
test/unit: finish inject tests 2018-09-03 09:34:28 -07:00
Mitchell Hashimoto
fc6d86b96d
test/unit: connect inject Deployment 2018-09-03 09:31:57 -07:00
Mitchell Hashimoto
489a396b4c
test/unit: UI service 2018-09-03 09:15:28 -07:00
Mitchell Hashimoto
5e1e1b1bf6
test/unit: client DaemonSet 2018-09-03 09:08:57 -07:00
Mitchell Hashimoto
64f43108f7
test/unit: server StatefulSet 2018-09-03 09:05:59 -07:00
Mitchell Hashimoto
0010bd014b
test/unit: server Service 2018-09-03 09:02:42 -07:00
Mitchell Hashimoto
fc30ae877e
test/unit: test DisruptionBudget 2018-09-03 08:58:19 -07:00
Mitchell Hashimoto
83fc9d981c
add unit tests that use helm template 2018-09-03 08:42:25 -07:00
Mitchell Hashimoto
d2558a0be3
use globals.domain instead of common in case we refactor later 2018-09-02 16:19:45 -07:00
Mitchell Hashimoto
3a61646b1d
Add global.enabled to disable all components by default 2018-09-02 16:19:11 -07:00
Mitchell Hashimoto
3a55af62fe
Allow overridable inject image, test images 2018-08-21 10:25:37 -07:00
Mitchell Hashimoto
f2e2bd7a52
fix typo that caused connect injector to not work 2018-08-18 14:55:33 -07:00
Mitchell Hashimoto
60e57f700e
setup templates for proper name prefixing 2018-08-18 14:48:22 -07:00
Mitchell Hashimoto
323feba49c
Move chart to top-level 2018-08-18 14:20:04 -07:00