Skip to content

Conversation

@cloudnull
Copy link
Contributor

Uses kustomize to deploy vault helm chart.

  • Prior installation:
    • It requires some storage available in the cluster. As user will install vault prior deploying CEPH, the cluster will not be having any storage configured. Hence, we need to consider local storage from the Kubernetes nodes. We can go with Rancher local path provisioner for the same[1].
    • It expects vault-tls-public Kubernetes secret containing FQDN ssl cert/key. We can encrypt "vault-tls-public" using sealed-secret and push to git to consume it using argocd.

[1]
https://github.com/rancher/local-path-provisioner

Adds kustomization for installing vault.
@cloudnull cloudnull merged commit 4c44a0c into rackerlabs:main Feb 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants