Set VAULT_DEV_LISTEN_ADDRESS in dev mode (#446)

Binds vault to 0.0.0.0 in dev mode so that external traffic is accepted.
hashicorp · Jan 15, 2021 · 69a3dc6 · 69a3dc6
1 parent 91e9446
commit 69a3dc6
Show file tree

Hide file tree

Showing 2 changed files with 37 additions and 14 deletions.
diff --git a/templates/_helpers.tpl b/templates/_helpers.tpl
@@ -132,6 +132,8 @@ Set's additional environment variables based on the mode.
   {{ if eq .mode "dev" }}
             - name: VAULT_DEV_ROOT_TOKEN_ID
               value: {{ .Values.server.dev.devRootToken }}
+            - name: VAULT_DEV_LISTEN_ADDRESS
+              value: "[::]:8200"
   {{ end }}
 {{- end -}}
 

diff --git a/test/unit/server-dev-statefulset.bats b/test/unit/server-dev-statefulset.bats
@@ -273,6 +273,35 @@ load _helpers
   [ "${actual}" = "customtoken" ]
 }
 
+#--------------------------------------------------------------------
+# dev listen address
+
+@test "server/dev-StatefulSet: set dev listen address in dev mode" {
+  cd `chart_dir`
+  local objects=$(helm template \
+      --show-only templates/server-statefulset.yaml  \
+      --set 'server.dev.enabled=true' \
+      . | tee /dev/stderr |
+      yq -r '.spec.template.spec.containers[0].env' | tee /dev/stderr)
+
+  local value=$(echo $objects |
+      yq -r 'map(select(.name=="VAULT_DEV_LISTEN_ADDRESS")) | .[] .value' | tee /dev/stderr)
+  [ "${value}" = "[::]:8200" ]
+}
+
+@test "server/dev-StatefulSet: dev listen address isn't set in non-dev mode" {
+  cd `chart_dir`
+  local objects=$(helm template \
+      --show-only templates/server-statefulset.yaml  \
+      --set 'server.dev.enabled=false' \
+      . | tee /dev/stderr |
+      yq -r '.spec.template.spec.containers[0].env' | tee /dev/stderr)
+
+  local name=$(echo $objects |
+      yq -r 'map(select(.name=="VAULT_DEV_LISTEN_ADDRESS")) | .[] .name' | tee /dev/stderr)
+  [ "${name}" = "" ]
+}
+
 #--------------------------------------------------------------------
 # extraEnvironmentVars
 
@@ -286,21 +315,13 @@ load _helpers
       . | tee /dev/stderr |
       yq -r '.spec.template.spec.containers[0].env' | tee /dev/stderr)
 
-  local actual=$(echo $object |
-      yq -r '.[12].name' | tee /dev/stderr)
-  [ "${actual}" = "FOO" ]
-
-  local actual=$(echo $object |
-      yq -r '.[12].value' | tee /dev/stderr)
-  [ "${actual}" = "bar" ]
-
-  local actual=$(echo $object |
-      yq -r '.[13].name' | tee /dev/stderr)
-  [ "${actual}" = "FOOBAR" ]
+  local value=$(echo $object |
+      yq -r 'map(select(.name=="FOO")) | .[] .value' | tee /dev/stderr)
+  [ "${value}" = "bar" ]
 
-  local actual=$(echo $object |
-      yq -r '.[13].value' | tee /dev/stderr)
-  [ "${actual}" = "foobar" ]
+  local value=$(echo $object |
+      yq -r 'map(select(.name=="FOOBAR")) | .[] .value' | tee /dev/stderr)
+  [ "${value}" = "foobar" ]
 }
 
 #--------------------------------------------------------------------