Michal.Wrobel/openbao-helm
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
628 commits 11 branches 48 tags 1.4 MiB
Commit graph

628 commits

This branch
This branch
All branches
Author SHA1 Message Date
Jan Martens
7a7a5b3711
Merge pull request #19 from openbao/bao-2-0-2 
Update OpenBao to v2.0.2
 2024-10-07 10:57:59 +02:00
Jan Martens
2e7c23ce62
update chart version 
Signed-off-by: Jan Martens <jan@martens.eu.org>
 2024-10-06 23:51:14 +02:00
Jan Martens
4549ad2b10
fix CSI driver integration 
Signed-off-by: Jan Martens <jan@martens.eu.org>
 2024-10-06 23:51:14 +02:00
Jan Martens
c5b02f372f
fix secret injector integration 
Signed-off-by: Jan Martens <jan@martens.eu.org>
 2024-10-06 23:04:13 +02:00
Jan Martens
3dd2dec9e3
update OpenBao to v2.0.2 
Signed-off-by: Jan Martens <jan@martens.eu.org>
 2024-10-06 23:04:13 +02:00
Finn
a6d9d9f388
Use the CSI agent image registry from configuration (#17) 
* Use the CSI agent image registry from configuration

Signed-off-by: Finn <finn@janky.solutions>

* csi-driver agent: Use BAO_LOG_LEVEL and BAO_LOG_FORMAT

Signed-off-by: Finn <finn@janky.solutions>

---------

Signed-off-by: Finn <finn@janky.solutions>
 2024-09-10 09:31:43 -04:00
Jan Martens
f9daaad711
Merge pull request #16 from openbao/bao-2-0-1 
update used OpenBao Version to 2.0.1
 2024-09-05 00:01:52 +02:00
Jan Martens
100bfce452
update chart README 
Signed-off-by: Jan Martens <jan@martens.eu.org>
 2024-09-04 23:54:05 +02:00
Jan Martens
e0be4ae6de
disable injector and CSI tests 
We do not provide our own images for those components yet which is
causing some incompabilites and test failures

Signed-off-by: Jan Martens <jan@martens.eu.org>
 2024-09-04 23:51:49 +02:00
Jan Martens
4f63aa2373
fix acceptance tests 
Signed-off-by: Jan Martens <jan@martens.eu.org>
 2024-09-04 23:51:49 +02:00
Jan Martens
d6a660e868
fix chart unit tests 
Signed-off-by: Jan Martens <jan@martens.eu.org>
 2024-09-04 23:51:48 +02:00
Jan Martens
5fba05f8f8
fix chart verifier tests 
Signed-off-by: Jan Martens <jan@martens.eu.org>
 2024-09-04 23:51:48 +02:00
Jan Martens
5d545983bf
update used OpenBao Version to 2.0.1 
Signed-off-by: Jan Martens <jan@martens.eu.org>
 2024-09-04 23:51:48 +02:00
Jan Martens
540d8c5309
Merge pull request #15 from jorge882/patch-1 
Corrected Helm values.yaml file - prometheusRules
 2024-09-03 23:11:35 +02:00
jorge882
a6f8ccdfed
Corrected Helm values.yaml file - prometheusRules 
Corrected the alert: valut-HighResponseTime alert rules (lines 1325-26), as well as the documentation (1324) to properly reflect a 10 minute threshold for the critical warning.

Signed-off-by: jorge882 <jorge882@gmail.com>
 2024-08-23 12:24:36 -05:00
Tijmen
ad8307d533
Remove hashicorp documentation links from values.yaml (#13) 
Signed-off-by: Tijmen <17317361+Btijmen@users.noreply.github.com>
 2024-08-08 21:13:31 +09:00
jessebot
d5dba29bf5 more updates of vault to openbao, and more updates of old k8s versions 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
jessebot
547020f267 update all the tests to use kube-version 1.27.x instead of 1.22.x so we're supporting supported versions of kubernetes 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
jessebot
8f700eb551 fix chart dir for unit tests 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
jessebot
bfd5135800 clean up more references to vault and licensing 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
jessebot
b473c07acc update more vault to openbao everywhere 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
jessebot
f15d0f69f9 remove enterprise tests 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
jessebot
4f8924d1d7 replace vault command with bao and helm install/delete vault with openbao - part 1 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
jessebot
7b8c26e1ce update keywords for Chart.yaml to include openbao 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
jessebot
18652008f4 fix openshift values to use openbao docker images 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
JesseBot
534811b617 Update charts/openbao/Chart.yaml - fix email to be valid email address 
Signed-off-by: JesseBot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
jessebot
5278ab9ced update email for chart and regenerate docs 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
jessebot
a139a100bf attempt to fix helm install in bats tests 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
jessebot
d6a7dce06c we now use /openbao/config instead of /vault/config 
ref: 8283776683/Dockerfile (L45)

also change types from null to [] to be more explicit and regenerate docs

Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
jessebot
754c4ee94d the command is bao not openbao 🤦 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
jessebot
2c9d040059 update the openbao helm chart test that runs after install to no longer use the vault command 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-29 10:43:12 -04:00
Nathan Phelps
b59b6e55bb Issue 6: Removed Enterprise reference from chart's server-statefulset template. 
Signed-off-by: Nathan Phelps <naphelps@us.ibm.com>
 2024-05-20 17:43:17 -04:00
Nathan Phelps
675c249026 Issue 6: Removing Enterprise references from chart template helper. 
Signed-off-by: Nathan Phelps <naphelps@us.ibm.com>
 2024-05-20 17:43:17 -04:00
Nathan Phelps
c4b831e734 Issue 6: Updated the chart version to 0.3.0. 
Signed-off-by: Nathan Phelps <naphelps@us.ibm.com>
 2024-05-20 17:43:17 -04:00
Nathan Phelps
e5973aeff3 Issue 6: Removed Enterprise licensing references out of the chart's value configuration. 
Signed-off-by: Nathan Phelps <naphelps@us.ibm.com>
 2024-05-20 17:43:17 -04:00
Nathan Phelps
be6fa5a195 Issue 6: Changed some of the Hashicorp Vault refences in the docs to OpenBao. 
Signed-off-by: Nathan Phelps <naphelps@us.ibm.com>
 2024-05-20 17:43:17 -04:00
jessebot
7ad371f159 fix missing space in comment 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-20 17:08:36 -04:00
jessebot
cb464ff650 fix linter issues with values.yaml to please chart tesitng linter 
ref: https://github.com/openbao/openbao-helm/actions/runs/9139677624/job/25132235295?pr=8
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-20 17:08:36 -04:00
jessebot
cbf6f461e2 actually template out the image.registry for each image map reference 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-20 17:08:36 -04:00
jessebot
915f7c845c update base vault images to point at quay.io/openbao/openbao; add more helm docs 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-20 17:08:36 -04:00
JesseBot
ed58ce3e78 Update charts/openbao/Chart.yaml - use default branding image 
Signed-off-by: JesseBot <jessebot@linux.com>
 2024-05-17 08:18:38 -04:00
JesseBot
c16fc99e7c Update charts/openbao/Chart.yaml - update the maintainer to be OpenBao 
Signed-off-by: JesseBot <jessebot@linux.com>
 2024-05-17 08:18:38 -04:00
JesseBot
302fdc8a22 Update charts/openbao/Chart.yaml - fix chart description OpenBao casing 
Signed-off-by: JesseBot <jessebot@linux.com>
 2024-05-17 08:18:38 -04:00
jessebot
00ed536f64 add official openbao security email 
Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-17 08:18:38 -04:00
jessebot
5544941fff begin changes to using openbao everywhere instead of vault 
also begin massive change over to using helm's official chart release and testing actions

Signed-off-by: jessebot <jessebot@linux.com>
 2024-05-17 08:18:38 -04:00
dependabot[bot]
c5f9247828
Bump helm/kind-action from 1.8.0 to 1.9.0 (#999) 
Bumps [helm/kind-action](https://github.com/helm/kind-action) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](dda0770415...99576bfa6d)

---
updated-dependencies:
- dependency-name: helm/kind-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-03-22 18:26:53 -07:00
Ben Ash
dbfb243d03
Update code owners (#1006) 
- ignore scratch dir
 2024-03-19 16:07:57 -04:00
Theron Voran
e439b28914
injector: add get for nodes in clusterrole (#1005) 
Required for operator-lib leader logic
 2024-03-18 21:55:51 -07:00
Christopher Swenson
d186b6ff29
Add annotation on config change (#1001) 
When updating the Vault config (and corresponding)
configmap, we now generate a checksum of the config
and set it as an annotation on both the configmap
and the Vault StatefulSet pod template.

This allows the deployer to know what pods need to
be restarted to pick up the a changed config.

We still recommend using the standard upgrade
[method for Vault on Kubernetes](https://developer.hashicorp.com/vault/tutorials/kubernetes/kubernetes-raft-deployment-guide#upgrading-vault-on-kubernetes),
i.e., using the `OnDelete` strategy
for the Vault StatefulSet, so updating the config
and doing a `helm upgrade` should not trigger the
pods to restart, and then deleting pods one
at a time, starting with the standby pods.

With `kubectl` and `jq`, you can check check which
pods need to be updated by first getting the value
of the current configmap checksum:

```shell
kubectl get pods -o json | jq -r ".items[] | select(.metadata.annotations.\"config/checksum\" != $(kubectl get configmap vault-config -o json | jq '.metadata.annotations."config/checksum"') ) | .metadata.name"
```

Fixes #748.

---------

Co-authored-by: Tom Proctor <tomhjp@users.noreply.github.com>
 2024-03-18 11:03:56 -07:00
Ben Ash
6930c378d2
Test against k8s 1.29 (#1003) 
* Drop k8s 1.24
* Use latest kind version v0.22.0
 2024-03-11 15:23:14 -04:00