Commit graph

309 commits

Author SHA1 Message Date
Jason O'Donnell
d1ad4ff403
changelog++ 2020-06-02 10:12:13 -04:00
ttinkr
4f81ac070b
imagePullSecrets in injector-deployment (#298)
Co-authored-by: ttinkr <thomas.fellinger@nts.eu>
2020-06-02 10:09:48 -04:00
Theron Voran
8e982a6c9d
Allow setting HA services type (#317)
Making the types for active and standby services configurable (just
like the main vault service).
2020-06-02 10:06:50 -04:00
lukemassa
78ca71d2eb
Removing namespace from yaml of non-namespaced objects (#300) 2020-05-28 22:47:41 -04:00
Jason O'Donnell
cd7591b0f8
changelog++ 2020-05-28 14:55:47 -04:00
Theron Voran
e58051e3c6
changelog++ 2020-05-28 11:54:52 -07:00
Jason O'Donnell
4215316818
Add postStart lifecycle hook (#315)
* Add postStart lifecycle hook

* Update values.yaml

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2020-05-28 14:53:46 -04:00
georgekaz
d755ad1ba0
Use active service on ingress when ha (#270)
Added some logic that points the ingress at the active server
when in ha mode. There are times that pointing at the standby
pods causes problems.
2020-05-28 11:51:25 -07:00
Sarah Thompson
7002cc664b
Get acceptance tests running against GKE in CI - merges to master only. (#291)
* Get acceptance tests running against GKE in CI - merges to master only.

* Adding README.md
2020-05-27 17:21:16 +01:00
Theron Voran
7cc905e00e
changelog++ 2020-05-26 19:31:06 -07:00
Gorka Maiztegi
6b77840e22
Update ingress apiVersion (#310)
The apiVersion `extensions/v1beta1` for ingresses has been removed in Kubernetes 1.16 and the new `networking.k8s.io/v1beta1` has to be used now. This conditional keeps compatibility with older Kubernetes versions while using the new apiVersion when available.
2020-05-26 19:28:15 -07:00
Josh Keife
9a835c40f1
Update comment in standby service (#299) 2020-05-21 11:58:53 -04:00
Theron Voran
7e5ed6bae9
changelog++ 2020-05-20 09:18:54 -07:00
Theron Voran
7b744295cf
Update default values (#309)
Updating some of the default values to match how they're used in
the templates.
2020-05-20 09:16:54 -07:00
Theron Voran
dd8e3a230c
updated readme with the helm repo info (#308) 2020-05-20 09:15:55 -07:00
Jason O'Donnell
ac6089c45e
changelog++ 2020-05-08 14:36:56 -04:00
Adrienne Cohea
0cc1af1876
Add init containers to support TLS certificate introduction and other dynamic configuration use cases. (#258) 2020-05-08 14:35:39 -04:00
Jason O'Donnell
08a6f929b8
Revert "Add support for priorityClassName (#165)" (#287)
This reverts commit 2af6f9b44f.
2020-05-05 11:29:09 -04:00
Brian Choy
2af6f9b44f
Add support for priorityClassName (#165)
* Add support for priorityClassName

* Add unit tests

* Remove comment

* Update comment, accidentally deleted comment

* Remove whitespace
2020-05-05 11:10:17 -04:00
Theron Voran
24b13630f0
Update CHANGELOG.md 2020-04-30 18:38:42 -07:00
Yong Wen Chua
c8b18d1876
Support setting priorityClassName on pods (#282) 2020-04-30 18:37:27 -07:00
Alvin Huang
ee2827f710
add API trigger for helm charts index (#281) 2020-04-29 14:37:18 -04:00
Jason O'Donnell
c045ad89aa
Fix raft acceptance test (#279) 2020-04-27 14:49:09 -04:00
Jason O'Donnell
138b9217a5
changelog++ 2020-04-27 11:39:22 -04:00
Yong Wen Chua
8cc3fdb167
Add support for setting VAULT_RAFT_NODE_ID environment variable (#269)
* Add support for setting VAULT_RAFT_NODE_ID environment variable

* Update server-statefulset.yaml

* Update server-ha-statefulset.bats
2020-04-27 11:38:26 -04:00
Theron Voran
accbd222ec
changelog++ 2020-04-27 08:31:25 -07:00
Theron Voran
e09de0dc63
Allow both yaml and multi-line string annotations (#272)
Changed/added helper functions to detect if the annotations value
is a string or yaml, and apply `tpl` or `toYaml`
accordingly. Defaults are left as `{}` since yaml is more likely
to be used with helm on the command line. This means a warning
will be shown when setting an annotation to a multi-line
string (which has been the existing behavior).
2020-04-27 08:28:50 -07:00
Jason O'Donnell
7880c3b973
changelog++ 2020-04-27 10:47:28 -04:00
David Moreno García
0f36ee3a5b
Change config specification (#213)
* Change config specification

As it is right now, the specification of the config is done through an
string. When using storage backends like PostgreSQL, the password for the
database has to be included in the config variable of the values file.

This change allows to specify the configuration through a map, making
the chart GitOps friendly. Now, sensitive values can be stored in a
different values file or passed on deployment time with --set.

To have a very generic specification:
- I've assumed that the combination stanza (eg. storage) name (eg. file)
is unique.
- Quoted values for all stanza parameters. I tested a generated
configuration in a vault docker image and it seems to work just fine.

* Change config format to json

* Add conditional formatting

* Add config for raft mode
2020-04-27 10:45:56 -04:00
Theron Voran
1be24460f3
changelog++ 2020-04-21 08:20:41 -07:00
Theron Voran
2072bf2dcd
Fix ha standby and active service annotations (#268)
* service: fix annotations for HA standby/active services

* added unit tests

Co-authored-by: yotsub <63680950+yotsub@users.noreply.github.com>
2020-04-21 08:19:17 -07:00
Theron Voran
39631aad6b
changelog++ 2020-04-13 10:17:49 -07:00
Javad Karabi
374ea22c02
use port names that map to vault.scheme (#223)
* use port names that map to vault.scheme

* prefix internal/replication port names with vault.scheme

* port names must be 'no more than 15 characters'

* test vault server service port names are prefixed with vault scheme

* test vault server statefulset port names are prefixed with vault scheme

* test vault ui service port names are prefixed with vault scheme

* formatting: replace double quote with single quote

* uncomment accidentally-commented lines

* always set internal port name to https-internal, since it is always https

* prefix headless service internal port name with https
2020-04-13 08:48:23 -07:00
Denys Vitali
0e115513c2
docs(REAMDE): Fix Vault K8s dead link (#256) 2020-04-10 10:43:14 -04:00
Jason O'Donnell
c869fa8651
changelog++ 2020-04-09 12:51:35 -04:00
Jared Allard
27a3a76513
fix(templates/server): ingress has default paths of / (#224)
* fix(templates/server): ingress has default paths of /

* fix: array -> list

It's been awhile since I wrote Helm templates :/
2020-04-09 12:48:42 -04:00
Petter Abrahamsson
497daa5f60
Remove IPC_LOCK capability (#198)
* Remove IPC_LOCK capability

* Remove tests for IPC_LOCK
2020-04-09 12:47:17 -04:00
Jason O'Donnell
13f6df4e6a
Update to 0.5.0 (#253)
* Update to 0.5.0

* Add changelog for k8s service discovery
2020-04-09 09:51:37 -04:00
Jason O'Donnell
6d5a2174d8
Add Vault Helm ent support, service discovery (#250)
* Add Vault Helm ent support, service discovery

* Fix unit test

* Update test/acceptance/server-ha-enterprise-dr.bats

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

* Update test/acceptance/server-ha-enterprise-dr.bats

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

* Update test/acceptance/server-ha-enterprise-perf.bats

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

* Update test/acceptance/server-ha-enterprise-perf.bats

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

* Update values.yaml

Co-Authored-By: Theron Voran <tvoran@users.noreply.github.com>

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2020-04-09 09:26:58 -04:00
Luiz Muller
2b137c95d2
fix link to documentation (#247) 2020-04-03 17:47:33 -07:00
Jason O'Donnell
e97f4a579f
Fix hardcoded service name in raft enfv (#240) 2020-03-26 17:19:26 -04:00
Daniel Mittelman
ac64feb0eb
Clarified documentation about Raft PV creation (#239) 2020-03-26 10:15:08 -04:00
Jason O'Donnell
d57bd7cb6e
Fix bug with api server env (#237) 2020-03-23 12:10:47 -04:00
Theron Voran
0550623c21
Fix server-headless-service annotations (#236)
`Values.server.service.annotations` are now being treated as multi-line
strings, to match the other annotations in the chart, and to support
templating within the annotations.
2020-03-20 10:54:32 -07:00
Theron Voran
04df47159d
Update CHANGELOG.md 2020-03-20 08:39:56 -07:00
Theron Voran
2a37c571d7
Making all annotations multi-line strings (#227)
Annotations for various objects were either multi-line strings or yaml
maps strings, so this is making them all multi-line strings for
consistency. Also updated the doc comment for namespaceSelector, since
it's being read as a yaml map (toYaml).
2020-03-20 08:37:40 -07:00
Theron Voran
127b95d6f9
changelog++ 2020-03-19 22:45:58 -07:00
Theron Voran
1a8d9de511
Injector scheduler options (#234)
Adds affinity, tolerations, and nodeSelector options for the
injector deployment that are separate from those options on the vault
server statefulset.

Co-authored-by: Sergei Shishov <sergei.shishov@dubizzle.com>
2020-03-19 22:43:52 -07:00
Theron Voran
aeaeaa02fb
changelog++ 2020-03-18 21:32:45 -07:00
Theron Voran
fa13c47858
Add injector.extraEnvironmentVars (#232)
Allows user-specified environment variables to be set in the injector
deployment.
2020-03-18 21:30:22 -07:00