cluster

commit 67339beb851ad5c5b6ddefa1bd88a31b50dd057a
parent ffe11a937e92983eb6418a0bfac1a5e9eaf11f78
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sat, 25 Jan 2025 17:24:50 +0100

Deploy vault

Diffstat:
M
apps/base/vault/release.yaml
 | 
29
+++++++++++++++--------------

1 file changed, 15 insertions(+), 14 deletions(-)
diff --git a/apps/base/vault/release.yaml b/apps/base/vault/release.yaml
@@ -17,17 +17,17 @@ spec:
             enabled: true
             tlsDisable: false
         server:
-            extraEnvironmentVars:
-                VAULT_CACERT: "/vault/userconfig/vault-server-tls/vaultca.ca"
-            volumes:
-                - name: userconfig-vault-server-tls
-                  secret:
-                      defaultMode: 420
-                      secretName: vault-server-tls
-            volumeMounts:
-                - mountPath: "/vault/userconfig/vault-server-tls"
-                  name: userconfig-vault-server-tls
-                  readOnly: true
+            #extraEnvironmentVars:
+            #    VAULT_CACERT: "/vault/userconfig/vault-server-tls/vaultca.ca"
+            #volumes:
+            #    - name: userconfig-vault-server-tls
+            #      secret:
+            #          defaultMode: 420
+            #          secretName: vault-server-tls
+            #volumeMounts:
+            #    - mountPath: "/vault/userconfig/vault-server-tls"
+            #      name: userconfig-vault-server-tls
+            #      readOnly: true
             auditStorage:
                 enabled: true
                 size: 10Gi
@@ -46,9 +46,10 @@ spec:
                     listener "tcp" {
                       address = "[::]:8200"
                       cluster_address = "[::]:8201"
-                      tls_cert_file = "/vault/userconfig/vault-server-tls/vault.crt"
-                      tls_key_file  = "/vault/userconfig/vault-server-tls/vault.key"
-                      tls_client_ca_file = "/vault/userconfig/vault-server-tls/vaultca.ca"
+                      #tls_cert_file = "/vault/userconfig/vault-server-tls/vault.crt"
+                      #tls_key_file  = "/vault/userconfig/vault-server-tls/vault.key"
+                      #tls_client_ca_file = "/vault/userconfig/vault-server-tls/vaultca.ca"
+                      tls_disable = "true"
                     }
 
                     storage "file" {