vault

Official HashiCorp Vault Chart

Upstream References

• https://developer.hashicorp.com/vault
• https://github.com/hashicorp/vault
• https://github.com/hashicorp/vault-helm
• https://github.com/hashicorp/vault-k8s
• https://github.com/hashicorp/vault-csi-provider

Upstream Release Notes

This package has no upstream release note links on file. Please add some to chart/Chart.yaml under annotations.bigbang.dev/upstreamReleaseNotesMarkdown. Example:

annotations:
  bigbang.dev/upstreamReleaseNotesMarkdown: |
    - [Find our upstream chart's CHANGELOG here](https://link-goes-here/CHANGELOG.md)
    - [and our upstream application release notes here](https://another-link-here/RELEASE_NOTES.md)

Learn More

• Application Overview
• Other Documentation

Pre-Requisites

• Kubernetes Cluster deployed
• Kubernetes config installed in ~/.kube/config
• Helm installed

Kubernetes: >= 1.20.0-0

Install Helm

https://helm.sh/docs/intro/install/

Deployment

• Clone down the repository
• cd into directory

helm install vault chart/

Values

Key	Type	Default	Description
domain	string	"dev.bigbang.mil"
monitoring.enabled	bool	false
monitoring.namespace	string	"monitoring"
networkPolicies.enabled	bool	false
networkPolicies.controlPlaneCidr	string	"0.0.0.0/0"
networkPolicies.vpcCidr	string	"0.0.0.0/0"
networkPolicies.ingressLabels.app	string	"istio-ingressgateway"
networkPolicies.ingressLabels.istio	string	"ingressgateway"
networkPolicies.additionalPolicies	list	[]
autoInit.enabled	bool	true
autoInit.image.repository	string	"registry1.dso.mil/ironbank/big-bang/base"
autoInit.image.tag	string	"2.1.0"
autoInit.storage.size	string	"2Gi"
istio.enabled	bool	false
istio.hardened.enabled	bool	false
istio.hardened.customAuthorizationPolicies	list	[]
istio.hardened.monitoring.enabled	bool	true
istio.hardened.monitoring.namespaces[0]	string	"monitoring"
istio.hardened.monitoring.principals[0]	string	"cluster.local/ns/monitoring/sa/monitoring-grafana"
istio.hardened.monitoring.principals[1]	string	"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-alertmanager"
istio.hardened.monitoring.principals[2]	string	"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-operator"
istio.hardened.monitoring.principals[3]	string	"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-prometheus"
istio.hardened.monitoring.principals[4]	string	"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-state-metrics"
istio.hardened.monitoring.principals[5]	string	"cluster.local/ns/monitoring/sa/monitoring-monitoring-prometheus-node-exporter"
istio.hardened.apiAccess.enabled	bool	true
istio.hardened.apiAccess.ports[0]	string	"8200"
istio.vault.enabled	bool	true
istio.vault.gateways[0]	string	"istio-system/main"
istio.vault.hosts[0]	string	"vault.{{ .Values.domain }}"
istio.vault.tls.cert	string	""
istio.vault.tls.key	string	""
istio.mtls.mode	string	"STRICT"
minio.enabled	bool	false
customAppIngressSelector.key	string	"vault-ingress"
customAppIngressSelector.value	bool	true
bbtests.enabled	bool	false
bbtests.cypress.resources.requests.cpu	int	2
bbtests.cypress.resources.requests.memory	string	"8Gi"
bbtests.cypress.resources.limits.cpu	int	2
bbtests.cypress.resources.limits.memory	string	"8Gi"
bbtests.cypress.artifacts	bool	true
bbtests.cypress.envs.cypress_vault_url	string	"http://vault.vault.svc:8200"
bbtests.cypress.secretEnvs[0].name	string	"cypress_token"
bbtests.cypress.secretEnvs[0].valueFrom.secretKeyRef.name	string	"vault-token"
bbtests.cypress.secretEnvs[0].valueFrom.secretKeyRef.key	string	"key"
bbtests.cypress.disableDefaultTests	bool	false
bbtests.scripts.permissions.apiGroups[0]	string	""
bbtests.scripts.permissions.resources[0]	string	"configmaps"
bbtests.scripts.permissions.verbs[0]	string	"create"
bbtests.scripts.permissions.verbs[1]	string	"delete"
bbtests.scripts.permissions.verbs[2]	string	"list"
bbtests.scripts.permissions.verbs[3]	string	"get"
bbtests.scripts.image	string	"registry1.dso.mil/ironbank/big-bang/base:2.1.0"
bbtests.scripts.envs.VAULT_PORT	string	"80"
bbtests.scripts.envs.VAULT_HOST	string	"http://vault"
bbtests.scripts.secretEnvs[0].name	string	"vault_token"
bbtests.scripts.secretEnvs[0].valueFrom.secretKeyRef.name	string	"vault-token"
bbtests.scripts.secretEnvs[0].valueFrom.secretKeyRef.key	string	"key"
openshift	bool	false
upstream	object	Upstream chart values	Values to pass to the upstream vault chart

Contributing

Please see the contributing guide if you are interested in contributing.

---

This file is programatically generated using helm-docs and some BigBang-specific templates. The gluon repository has instructions for regenerating package READMEs.