Michal.Wrobel/openbao-helm
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
441 commits 11 branches 48 tags 1.4 MiB
Commit graph

441 commits

This branch
This branch
All branches
Author SHA1 Message Date
Eric Miller
102c29955b Implement injector HA statefulset topology UTs 2021-11-22 15:24:38 -06:00
Eric Miller
567a4386a5 Implement injector statefulset topology spread UTs 2021-11-22 15:21:15 -06:00
Eric Miller
f49ecb6802 Implement injector deployment topology spread UTs 
* also remove string from the relevant schema types
 2021-11-22 15:12:17 -06:00
Eric Miller
8840187301 Add topologySpreadConstraints to values schema 2021-11-22 14:36:11 -06:00
Ellis Tarn
87c3e62030
Update values.yaml 
Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
 2021-09-27 15:19:47 -07:00
Ellis Tarn
c77cb1f6a4
Update values.yaml 
Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
 2021-09-27 15:19:43 -07:00
Ellis Tarn
18f8db05d9 Implemented support for topology spread constraints 2021-09-17 16:30:49 -07:00
Theron Voran
cd2059147d
vault 0.16.0 release (#612) 2021-09-16 09:39:59 -07:00
Theron Voran
78a355bffc
changelog++ 2021-09-15 18:59:34 -07:00
Theron Voran
5a864f7cbb
Adding support for the old leader-elector (#607) 
Adds the leader-elector container support that was removed in
PR #568. The new vault-k8s uses an internal mechanism for leader
determination, so this is just for backwards compatibility, and can
be removed in the near future.

* mark the endpoint as deprecated

* add a new useContainer option for leaderElector

Default to not deploying the old leader-elector container, unless
injector.leaderElector.useContainer is `true`.
 2021-09-15 18:43:04 -07:00
Ben Ash
dd3b3f06e0
changelog++ 2021-09-15 14:22:35 -04:00
Ben Ash
c267805dea
changelog++ 2021-09-15 14:22:02 -04:00
Toni Tauro
23e0348842
feat(csi): make provider hostPaths configurable (#603) 
*  add configurable values for providersDir and kubeletRootDir

Signed-off-by: Toni Tauro <toni.tauro@adfinis.com>

Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
 2021-09-15 14:12:24 -04:00
Theron Voran
8932c372b7
Fix the CSI acceptance test (#608) 
The `master` branch was renamed to `main` for
kubernetes-sigs/secrets-store-csi-driver

* use a specific version in the URL

* use csi driver 0.2.0
 2021-09-07 18:09:30 -07:00
Theron Voran
87a0a56ad9
changelog++ 2021-08-31 15:21:49 -07:00
Theron Voran
d31f942d3e
Support vault-k8s internal leader election (#568) 2021-08-31 15:16:06 -07:00
Theron Voran
c820454dd5
vault-helm 0.15.0 release (#598) 2021-08-23 08:51:52 -07:00
Theron Voran
22df6c0d9b
changelog++ 2021-08-16 13:50:47 -07:00
Theron Voran
f7ab37fd50
Add injector.webhookAnnotations chart option (#584) 2021-08-16 13:49:26 -07:00
Theron Voran
277317524a
changelog++ 2021-08-11 17:03:26 -07:00
Maxime Bruneau
c9c23b1a9b
Add imagePullSecrets on server test (#572) 
Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2021-08-11 17:01:58 -07:00
Theron Voran
bfc01c1e5d
Update chart verifier (#579) 
The test names now have "v1.0/" prepended. chart-verifier docker
images are now tagged too.
 2021-07-29 14:51:35 -07:00
Theron Voran
a5c85627b3
vault-helm 0.14.0 release (#578) 2021-07-28 14:44:28 -07:00
Ben Ash
86ff773249
++changelog 2021-07-23 13:00:50 -04:00
Ben Ash
64b4d88c72
feature: imagePullSecrets from string array. (#576) 
* allow configuring imagePullSecrets from an array of strings in
  addition to the already supported array of maps
 2021-07-23 12:05:24 -04:00
Jason O'Donnell
43656864c6
changelog++ 2021-07-15 14:18:08 -04:00
Jason O'Donnell
255cdc7d26
Add ingress/route configurable to specify active/general service (#570) 
* Add ingress/route configurable to specify active/general service

* Update test/unit/server-ingress.bats

Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>

* values.schema.json

Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
 2021-07-15 14:15:46 -04:00
Ben Ash
a0d7b84ec2
++changelog 2021-07-12 17:33:03 -04:00
Ben Ash
4a4295da81
Update acceptance tests to use the new stable GKE version 1.18.x (#569) 2021-07-12 15:47:07 -04:00
Ben Ash
2d420856a4
Update the default vault agent image to come from the hashicorp docker organization. (#567) 
* Default to hashicorp/vault for vault agent image.

* Add support for running acceptance tests against a kind cluster

* make the injector-leader-elector a bit more reliable when run locally
 2021-07-12 13:00:12 -04:00
Ben Ash
f5ef752e9a
++changelog 2021-07-07 19:32:02 -04:00
Ben Ash
1e4709cc46
feature: Support configuring various properties as YAML directly. (#565) 
* feature: Support configuring various properties as YAML directly.
Supported properties include: pod tolerations, pod affinity, and node selectors.
 2021-07-07 19:07:58 -04:00
Calvin Leung Huang
14d1f97edd
injector: add templateConfig.exitOnRetryFailure annotation (#560) 
* injector: add templateConfig.exitOnRetryFailure annotation

* update values.schema.json
 2021-07-06 09:49:48 -07:00
Theron Voran
f67b844d30
Update to v0.13.0 (#554) 2021-06-17 10:52:21 -07:00
Theron Voran
7509bc739d
changelog++ 2021-06-16 13:57:16 -07:00
Theron Voran
0f832e01fc
Add openshift overrides (#549) 
Adds default overrides for OpenShift (values.openshift.yaml) and uses
them in the chart-verifier tests.
 2021-06-16 13:54:22 -07:00
Theron Voran
3a6e097ae5
changelog++ 2021-06-11 13:31:41 -07:00
Theron Voran
4d23074cd3
Adding server.enterpriseLicense (#547) 
Sets up a vault-enterprise license for autoloading on vault
startup. Mounts an existing secret to /vault/license and sets
VAULT_LICENSE_PATH appropriately.
 2021-06-11 13:29:30 -07:00
Theron Voran
bb63d73b5a
changelog++ 2021-06-10 15:34:49 -07:00
Ricardo Gândara Pinto
d27121c223
Added webhook-certs volume mount to sidecar injector (#545) 
* Removed webhook-certs volume mount from leader-elector container

* Added test: injector deployment manual TLS adds volume mount
 2021-06-10 15:32:22 -07:00
Theron Voran
637087fa70
use vault-helm-test:0.2.0 (#543) 2021-06-02 09:12:15 -07:00
Theron Voran
ad9a46ae66
changelog++ 2021-06-01 10:52:44 -07:00
Rule88
458876007a
change maxUnavailable to integer (#535) 
change maxUnavailable from `null` to `integer` to enable upgrade from
0.11.0 to 0.12.0 when using the specific variable.

* Also allow null value

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* add test for server.ha.disruptionBudget.maxUnavailable

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2021-06-01 10:51:18 -07:00
Theron Voran
828b31287b
changelog++ 2021-06-01 10:42:21 -07:00
Theron Voran
af25981752
fix ui.serviceNodePort schema (#537) 
UI service nodePort defaults to null, but is set as an integer
 2021-06-01 10:41:02 -07:00
Theron Voran
3afcb463f8
changelog++ 2021-05-27 17:11:17 -07:00
Theron Voran
3593739160
Adding helm test for vault server (#531) 
Also adds acceptance test for 'helm test' and updates the
chart-verifier version.
 2021-05-27 17:09:50 -07:00
Jason O'Donnell
b21b37b07a
Update to v0.12.0 (#532) 
* Update to v0.12.0

* Update values.schema.json

* Fix schema types

* revert image repo
 2021-05-25 13:46:48 -04:00
Jason O'Donnell
d53b011ae9
changelog++ 2021-05-25 10:21:01 -04:00
Iñigo Horcajo
4c71c268b9
Add UI targetPort option (#437) 
Use custom `targetPort` for UI service. See the usecase in https://github.com/hashicorp/vault-helm/issues/385#issuecomment-749560213
 2021-05-25 10:20:23 -04:00