UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects

SKIP UPGRADE: Finalization of package. Images all match and Resources=Requests for containers

Merged Ryan Garcia requested to merge finalization into main
Compare and
15 files
+ 343
169
Compare changes
  • Side-by-side
  • Inline
Files
15
{{- if .Values.autoInit.enabled }}
apiVersion: v1
data:
init.sh: |-
@@ -8,15 +9,8 @@ data:
KEYS_FOLDER="/vault/data"
VAULT_ENDPOINT=http://{{ template "vault.fullname" . }}-0.{{ template "vault.fullname" . }}-internal:8200/v1/sys/unseal
VAULT_ADDR=http://{{ template "vault.fullname" . }}-0.{{ template "vault.fullname" . }}-internal:8200
status=`curl $VAULT_ADDR -k -s -f -o /dev/null && echo "SUCCESS" || echo "ERROR"`
echo $status
if [[ $status == "ERROR" ]]
then
echo "waiting for 180 seconds"
sleep 180
fi
until curl $VAULT_ADDR -k -s -f -o /dev/null; do sleep 5; done
#VAULT_ENDPOINT="http://vault-0.vault-internal:8200/v1/sys/unseal"
MASTER_KEYS=$(vault operator init -address=$VAULT_ADDR -recovery-shares=5 -recovery-threshold=3 | grep -e "2:\|3:\|4:\|Token:" | awk '{print $4}')
KEY_NUMBER=1
@@ -46,15 +40,9 @@ data:
$(vault write auth/kubernetes/role/prometheus bound_service_account_names=prometheus bound_service_account_namespaces=monitoring policies=prometheus ttl=1h)
echo "vault monitoring auth enabled"
cd /home/vault
curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
chmod +x kubectl
mkdir -p ~/.local/bin/kubectl
mv ./kubectl ~/.local/bin/kubectl
export PATH=~/.local/bin/kubectl
kubectl create secret generic vault-token --from-literal=key="$TOKEN"
echo $TOKEN > /export/key
kind: ConfigMap
metadata:
name: vault-init-cm
\ No newline at end of file
name: vault-init-cm
{{- end }}
Loading