d8cad832ba
As a precursor to:
* Enabling Plugins
* So that I can get GitHub credentials from Vault via [this
plugin](https://github.com/martinbaillie/vault-plugin-secrets-github)
* So that I can use [this history-syncing
plugin](https://gitea.scubbo.org/scubbo/commit-report-sync) without
needing to refresh tokens, including in _this_ repo.
* At which point I want to [use LetsEncrypt to provide certs for Traefik
Ingresses](https://adamtheautomator.com/letsencrypt-with-k3s-kubernetes/#Ensuring_Seamless_Certificate_Renewals_with_a_ClusterIssuer)
* So that I can use Keycloak, which [demands an http
scheme](https://github.com/keycloak/keycloak/issues/30977#issuecomment-2208679081).
What a deep rabbit-hole I am in! :)
37 lines
889 B
Jsonnet
37 lines
889 B
Jsonnet
local appDef = import './app-definitions.libsonnet';
|
|
|
|
appDef.helmApplication(
|
|
name="vault",
|
|
sourceRepoUrl="https://helm.releases.hashicorp.com",
|
|
sourceChart="vault",
|
|
sourceTargetRevision="0.25.0",
|
|
helmValues={
|
|
global: {
|
|
namespace: "vault"
|
|
},
|
|
ui: {
|
|
enabled: true
|
|
},
|
|
serverTelemetry: {
|
|
serviceMonitor: {
|
|
enabled: true
|
|
}
|
|
},
|
|
server: {
|
|
ingress: {
|
|
enabled: true,
|
|
ingressClassName: "traefik",
|
|
hosts: [
|
|
{
|
|
host: "vault.avril",
|
|
paths: []
|
|
}
|
|
]
|
|
},
|
|
dataStorage: {
|
|
size: "20Gi",
|
|
storageClass: "freenas-iscsi-csi"
|
|
}
|
|
}
|
|
}
|
|
) |