⚠️ Repo Archive Notice

As of Nov 13, 2020, charts in this repo will no longer be updated. For more information, see the Helm Charts Deprecation and Archive Notice, and Update.

Kubernetes-vault Helm Chart

DEPRECATION NOTICE

This chart is deprecated and no longer supported.

Prerequisites Details

Working Vault cluster configured per instructions found here
Vault server API is available from Kubernetes pods
A Vault token created for the AppRole backend
Kubernetes 1.5

Chart Details

This chart will do the following:

Allows pods to automatically receive a Vault token using Vault's AppRole auth backend.

Installing the Chart

To install the chart with the release name my-release:

bash

$ helm install --name my-release incubator/kubernetes-vault --set vault.address=$your_vault_server --set vault.token=$your_vault_token

Configuration

The following tables lists the configurable parameters of the consul chart and their default values.

Parameter	Description	Default
`configMap.*`	Maps directly to `kubernetes-vault` configuration	empty
`image`	Container image name	`boostport/kubernetes-vault`
`imageTag`	Container image tag	`0.5.2`
`imagePullPolicy`	Container pull policy	`Always`
`replicaCount`	k8s pod replicas	`3`
`app`	k8s selector key	`kubernetes-vault`
`service.dummyPort`	Dummy port to register pod with API. Not actually used.	`80`
`rbac.create`	Should RBAC be created?	`true`
`serviceAccount.create`	Should ServiceAccount be created?	`false`
`serviceAccount.name`	ServiceAccount name to use (autogenerated if empty)	`null`
`resources.limits.cpu`	CPU limit	`100m`
`resources.limits.memory`	Memory limit	`128Mi`
`resources.requests.cpu`	CPU resource request	`100m`
`resources.requests.memory`	Memory resource request	`128Mi`

Specify each parameter using the --set key=value[,key=value] argument to helm install.

Alternatively, a YAML file that specifies the values for the parameters can be provided while installing the chart. For example,

bash

$ helm install --name my-release -f values.yaml incubator/kubernetes-vault