diff --git a/README.md b/README.md index 3e85450..91d2f29 100644 --- a/README.md +++ b/README.md @@ -7,7 +7,7 @@ To use this chart as a dependency: ```yaml dependencies: - name: ba-custom-hashicorp-vault - version: 1.0.5 + version: 1.0.6 repository: "https://helm.bridgemanaccessible.ca/" alias: passVault condition: passVault.enabled diff --git a/templates/vault-statefulset.yaml b/templates/vault-statefulset.yaml index b26751a..229dc03 100644 --- a/templates/vault-statefulset.yaml +++ b/templates/vault-statefulset.yaml @@ -7,7 +7,7 @@ metadata: app: {{ include "vault.fullname" . }} spec: serviceName: {{ include "vault.fullname" . }} - replicas: 1 + replicas: {{ .Values.create.replicaCount | default 1 }} selector: matchLabels: app: {{ include "vault.fullname" . }} @@ -32,6 +32,8 @@ spec: env: - name: VAULT_ADDR value: http://0.0.0.0:8200 + - name: POLICY_CAPABILITIES + value: {{ .Values.create.policyCapabilities | join "," }} - name: ROLE_ID_SECRET_NAME value: {{ .Values.create.appRole.roleIDSecretName }} - name: SECRET_ID_SECRET_NAME diff --git a/values.yaml b/values.yaml index f8f7694..e4054be 100644 --- a/values.yaml +++ b/values.yaml @@ -38,6 +38,9 @@ create: # The tag of the image to use tag: latest + + # The number of replicas of the Hashicorp Vault instance to create + #replicaCount: 1 # Configurations for the ingress of the created Hashicorp Vault instance ingress: @@ -65,6 +68,12 @@ create: storageClassName: vault-role-vars-rook-cephfs size: 512Mi + # The capabilities of the policy to create for the app + policyCapabilities: + - read + - create + - update + # Configurations for the AppRole authentication method for the created Vault instance appRole: # The name of the environment variable/secret that contains the Role ID for the app