From 17669211af39aa27cba19d4d3e1a6dc3c9c9ba38 Mon Sep 17 00:00:00 2001
From: Kavitha Thulasiraman <kavithathulasiraman@Kavithas-MacBook-Pro-2.local>
Date: Tue, 21 Sep 2021 14:53:29 -0400
Subject: [PATCH] add vault deployment
---
.../vault/twistlock-helmrelease.yaml | 56 +++++++++++++++++++
chart/values.yaml | 12 ++++
2 files changed, 68 insertions(+)
create mode 100644 chart/templates/vault/twistlock-helmrelease.yaml
diff --git a/chart/templates/vault/twistlock-helmrelease.yaml b/chart/templates/vault/twistlock-helmrelease.yaml
new file mode 100644
index 0000000000..14e476fc10
--- /dev/null
+++ b/chart/templates/vault/twistlock-helmrelease.yaml
@@ -0,0 +1,56 @@
+{{- $fluxSettingsVault := merge .Values.vault.flux .Values.flux -}}
+{{- if .Values.vault.enabled }}
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+ name: vault
+ namespace: {{ .Release.Namespace }}
+ labels:
+ app.kubernetes.io/name: vault
+ app.kubernetes.io/component: "sandbox"
+ {{- include "commonLabels" . | nindent 4}}
+spec:
+ targetNamespace: vault
+ chart:
+ spec:
+ chart: {{ .Values.vault.git.path }}
+ interval: 5m
+ sourceRef:
+ kind: GitRepository
+ name: vault
+ namespace: {{ .Release.Namespace }}
+
+ {{- toYaml $fluxSettingsVault | nindent 2 }}
+
+ {{- if .Values.vault.postRenderers }}
+ postRenderers:
+ {{ toYaml .Values.vault.postRenderers | nindent 4 }}
+ {{- end }}
+ valuesFrom:
+ - name: {{ .Release.Name }}-vault-values
+ kind: Secret
+ valuesKey: "common"
+ - name: {{ .Release.Name }}-vault-values
+ kind: Secret
+ valuesKey: "defaults"
+ - name: {{ .Release.Name }}-vault-values
+ kind: Secret
+ valuesKey: "overlays"
+
+ # TODO: DRY this up
+ {{- if or .Values.gatekeeper.enabled .Values.istio.enabled }}
+ dependsOn:
+ {{- if .Values.gatekeeper.enabled }}
+ - name: gatekeeper
+ namespace: {{ .Release.Namespace }}
+ {{- end }}
+ {{- if .Values.istio.enabled }}
+ - name: istio
+ namespace: {{ .Release.Namespace }}
+ {{- end }}
+ {{- if .Values.monitoring.enabled }}
+ - name: monitoring
+ namespace: {{ .Release.Namespace }}
+ {{- end }}
+ {{- end }}
+{{- end }}
diff --git a/chart/values.yaml b/chart/values.yaml
index f6ae1e5412..6e62c36825 100644
--- a/chart/values.yaml
+++ b/chart/values.yaml
@@ -562,6 +562,18 @@ addons:
# -- Additional authservice chain configurations.
chains: {}
+ # ----------------------------------------------------------------------------------------------------------------------
+ # Vault
+ #
+ vault:
+ # -- Toggle deployment of vault.
+ enabled: true
+ git:
+ repo: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/vault.git
+ path: "./chart"
+ branch: "deploy-vault"
+ # ----------------------------------------------------------------------------------------------------------------------
+
# ----------------------------------------------------------------------------------------------------------------------
# Minio Operator and Instance
#
--
GitLab