Michal.Wrobel/openbao-helm
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
598 commits 11 branches 48 tags 1.4 MiB
Commit graph

598 commits

This branch
This branch
All branches
Author SHA1 Message Date
Gary Frederick
a186036e7d
changelog++ (#636) 2021-10-25 13:58:15 -07:00
Tim Collins
c09c50f9d6
Add option for Ingress pathType (#634) 2021-10-25 11:30:06 -04:00
Theron Voran
dc08ab6324
note a regression in 0.17.0 (#635) 2021-10-22 18:00:29 -07:00
Theron Voran
91ac2eedbc
vault-helm 0.17.0 release (#632) 2021-10-21 12:12:45 -07:00
Theron Voran
3b1bb783be
Add server.ingress.ingressClassName (#630) 
Co-authored-by: Joel Cressy <joel@jtcressy.net>
 2021-10-21 09:23:45 -07:00
Ben Ash
4aa01e8986
Update changelog for #626 and #628 (#631) 2021-10-21 12:14:31 -04:00
Toni Tauro
6914c4d877
fix(csi-ds): mountpoint-dir same mountpath in pod (#628) 
* fix(csi-ds): mountpoint-dir same mountpath in pod

Signed-off-by: Toni Tauro <toni.tauro@adfinis.com>

* Update Chart.yaml

Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
 2021-10-19 15:06:07 -04:00
Ben Ash
d96a4287fa
Feat: add externalTrafficPolicy support (#626) 
- externalTrafficPolicy can be set for both the ui and server services.
  It is only supported for NodePort or LoadBalancer service types.
 2021-10-18 09:45:52 -04:00
Theron Voran
96b8c98b3b
Updating acceptance tests (#624) 
GKE's stable K8s version is now 1.19. Also adding VAULT_LICENSE_CI to
the `make test-acceptance` target to make it easier to run the
acceptance tests manually, and mentioned it in the test README.
 2021-10-11 14:12:55 -07:00
Theron Voran
ffd5086157
changelog++ (#623) 2021-10-11 10:28:37 +01:00
Vladislav Rumjantsev
72c485dd2c
ingress stable networking api (#590) 
* Moved ingress to stable networking api

* lower versions support

* ingress disabled by default

* added tests for old k8s
 2021-10-08 17:13:21 -07:00
Theron Voran
9758666262
fix chart publish job (#620) 
The branch parameter isn't for this repo
 2021-09-29 18:01:14 -07:00
Theron Voran
5dfc3515c1
vault-helm 0.16.1 release (#619) 2021-09-29 16:28:37 -07:00
Theron Voran
b69e3d9276
vault-helm default branch is now main (#618) 
Updated the circleci config to use the `main` branch, and also changed
a couple mentions in the contributing guide.
 2021-09-27 21:40:09 -07:00
Theron Voran
cd2059147d
vault 0.16.0 release (#612) 2021-09-16 09:39:59 -07:00
Theron Voran
78a355bffc
changelog++ 2021-09-15 18:59:34 -07:00
Theron Voran
5a864f7cbb
Adding support for the old leader-elector (#607) 
Adds the leader-elector container support that was removed in
PR #568. The new vault-k8s uses an internal mechanism for leader
determination, so this is just for backwards compatibility, and can
be removed in the near future.

* mark the endpoint as deprecated

* add a new useContainer option for leaderElector

Default to not deploying the old leader-elector container, unless
injector.leaderElector.useContainer is `true`.
 2021-09-15 18:43:04 -07:00
Ben Ash
dd3b3f06e0
changelog++ 2021-09-15 14:22:35 -04:00
Ben Ash
c267805dea
changelog++ 2021-09-15 14:22:02 -04:00
Toni Tauro
23e0348842
feat(csi): make provider hostPaths configurable (#603) 
*  add configurable values for providersDir and kubeletRootDir

Signed-off-by: Toni Tauro <toni.tauro@adfinis.com>

Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
 2021-09-15 14:12:24 -04:00
Theron Voran
8932c372b7
Fix the CSI acceptance test (#608) 
The `master` branch was renamed to `main` for
kubernetes-sigs/secrets-store-csi-driver

* use a specific version in the URL

* use csi driver 0.2.0
 2021-09-07 18:09:30 -07:00
Theron Voran
87a0a56ad9
changelog++ 2021-08-31 15:21:49 -07:00
Theron Voran
d31f942d3e
Support vault-k8s internal leader election (#568) 2021-08-31 15:16:06 -07:00
Theron Voran
c820454dd5
vault-helm 0.15.0 release (#598) 2021-08-23 08:51:52 -07:00
Theron Voran
22df6c0d9b
changelog++ 2021-08-16 13:50:47 -07:00
Theron Voran
f7ab37fd50
Add injector.webhookAnnotations chart option (#584) 2021-08-16 13:49:26 -07:00
Theron Voran
277317524a
changelog++ 2021-08-11 17:03:26 -07:00
Maxime Bruneau
c9c23b1a9b
Add imagePullSecrets on server test (#572) 
Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2021-08-11 17:01:58 -07:00
Theron Voran
bfc01c1e5d
Update chart verifier (#579) 
The test names now have "v1.0/" prepended. chart-verifier docker
images are now tagged too.
 2021-07-29 14:51:35 -07:00
Theron Voran
a5c85627b3
vault-helm 0.14.0 release (#578) 2021-07-28 14:44:28 -07:00
Ben Ash
86ff773249
++changelog 2021-07-23 13:00:50 -04:00
Ben Ash
64b4d88c72
feature: imagePullSecrets from string array. (#576) 
* allow configuring imagePullSecrets from an array of strings in
  addition to the already supported array of maps
 2021-07-23 12:05:24 -04:00
Jason O'Donnell
43656864c6
changelog++ 2021-07-15 14:18:08 -04:00
Jason O'Donnell
255cdc7d26
Add ingress/route configurable to specify active/general service (#570) 
* Add ingress/route configurable to specify active/general service

* Update test/unit/server-ingress.bats

Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>

* values.schema.json

Co-authored-by: Ben Ash <32777270+benashz@users.noreply.github.com>
 2021-07-15 14:15:46 -04:00
Ben Ash
a0d7b84ec2
++changelog 2021-07-12 17:33:03 -04:00
Ben Ash
4a4295da81
Update acceptance tests to use the new stable GKE version 1.18.x (#569) 2021-07-12 15:47:07 -04:00
Ben Ash
2d420856a4
Update the default vault agent image to come from the hashicorp docker organization. (#567) 
* Default to hashicorp/vault for vault agent image.

* Add support for running acceptance tests against a kind cluster

* make the injector-leader-elector a bit more reliable when run locally
 2021-07-12 13:00:12 -04:00
Ben Ash
f5ef752e9a
++changelog 2021-07-07 19:32:02 -04:00
Ben Ash
1e4709cc46
feature: Support configuring various properties as YAML directly. (#565) 
* feature: Support configuring various properties as YAML directly.
Supported properties include: pod tolerations, pod affinity, and node selectors.
 2021-07-07 19:07:58 -04:00
Calvin Leung Huang
14d1f97edd
injector: add templateConfig.exitOnRetryFailure annotation (#560) 
* injector: add templateConfig.exitOnRetryFailure annotation

* update values.schema.json
 2021-07-06 09:49:48 -07:00
Theron Voran
f67b844d30
Update to v0.13.0 (#554) 2021-06-17 10:52:21 -07:00
Theron Voran
7509bc739d
changelog++ 2021-06-16 13:57:16 -07:00
Theron Voran
0f832e01fc
Add openshift overrides (#549) 
Adds default overrides for OpenShift (values.openshift.yaml) and uses
them in the chart-verifier tests.
 2021-06-16 13:54:22 -07:00
Theron Voran
3a6e097ae5
changelog++ 2021-06-11 13:31:41 -07:00
Theron Voran
4d23074cd3
Adding server.enterpriseLicense (#547) 
Sets up a vault-enterprise license for autoloading on vault
startup. Mounts an existing secret to /vault/license and sets
VAULT_LICENSE_PATH appropriately.
 2021-06-11 13:29:30 -07:00
Theron Voran
bb63d73b5a
changelog++ 2021-06-10 15:34:49 -07:00
Ricardo Gândara Pinto
d27121c223
Added webhook-certs volume mount to sidecar injector (#545) 
* Removed webhook-certs volume mount from leader-elector container

* Added test: injector deployment manual TLS adds volume mount
 2021-06-10 15:32:22 -07:00
Theron Voran
637087fa70
use vault-helm-test:0.2.0 (#543) 2021-06-02 09:12:15 -07:00
Theron Voran
ad9a46ae66
changelog++ 2021-06-01 10:52:44 -07:00
Rule88
458876007a
change maxUnavailable to integer (#535) 
change maxUnavailable from `null` to `integer` to enable upgrade from
0.11.0 to 0.12.0 when using the specific variable.

* Also allow null value

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

* add test for server.ha.disruptionBudget.maxUnavailable

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2021-06-01 10:51:18 -07:00