baschno/buun-stack
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(vault): disable CSI and set pod security standards

Browse Source
This commit is contained in:
Masaki Yatsu
2025-11-23 15:01:26 +09:00
parent bcf9cab7b8
commit fa8e2bd8c7
2 changed files with 33 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
vault/justfile
View File

@@ -1,7 +1,7 @@
set fallback := true
export K8S_VAULT_NAMESPACE := env("K8S_VAULT_NAMESPACE", "vault")
export VAULT_CHART_VERSION := env("VAULT_CHART_VERSION", "0.29.1")
export VAULT_CHART_VERSION := env("VAULT_CHART_VERSION", "0.31.0")
export VAULT_HOST := env("VAULT_HOST", "")
export VAULT_ADDR := "https://" + VAULT_HOST
export VAULT_DEBUG := env("VAULT_DEBUG", "false")
@@ -77,6 +77,10 @@ install: check-env
set -eu
just create-namespace
just add-helm-repo
kubectl label namespace ${K8S_VAULT_NAMESPACE} \
pod-security.kubernetes.io/enforce=restricted --overwrite
gomplate -f vault-values.gomplate.yaml -o vault-values.yaml
helm upgrade --cleanup-on-fail --install vault hashicorp/vault \
--version ${VAULT_CHART_VERSION} -n ${K8S_VAULT_NAMESPACE} --wait -f vault-values.yaml