add in ingress for web api and agent-injector

for https://repo1.dso.mil/platform-one/big-bang/bigbang/-/issues/943

Annotating external ports for vault agent inject requires pods in other namespaces have access to vault's server and injector ports.

Several fixes to the init process. Added some logic to handle some race conditions I saw and file permission errors. Now, the full output of the init process is store in a k8s secret. This way, we have all the keys and admin token saved in case we need them for recovery/unsealing the server.

Note: Upgrades are broken, and @trkdashin ran into upgrade issues too with his ticket. I think we're working on an upgrade hook to delete the job or handle it, so the upgrades work.

added 1 commit

• 6f6bbc5b - value fix for server port

Compare with previous version

changed the description

marked this merge request as ready

added statusreview label

added 1 commit

• 0ab3e886 - script fixes and storing full init output in secret

Compare with previous version

added 1 commit

• 6546982f - update changelog

Compare with previous version

changed the description

assigned to @michaelmartin

removed statusreview label

added vault label

marked this merge request as draft

marked this merge request as ready

changed title from Draft: add in ingress for web api and agent-injector to SKIP UPGRADE: add in ingress for web api and agent-injector

added statusreview label

requested review from @ryan.j.garcia, @gabe, and @toladipupo

changed the description

added 1 commit

• afac05c2 - configure auth for kubernetes

Compare with previous version

removed statusreview label

added statusdoing label

marked this merge request as draft