Back to Charts

⚠️ Repo Archive Notice

incubator/vaultingkube/README.md

latest4.7 KB
Original Source

⚠️ Repo Archive Notice

As of Nov 13, 2020, charts in this repo will no longer be updated. For more information, see the Helm Charts Deprecation and Archive Notice, and Update.

vaultingkube

vaultingkube takes config maps and secrets stored inside Hashicorp Vault and syncs them to your Kubernetes cluster.

DEPRECATION NOTICE

This chart is deprecated and no longer supported.

TL;DR;

console
$ helm install incubator/vaultingkube

Installing the Chart

To install the chart with the release name my-release:

console
$ helm install --name my-release incubator/vaultingkube

Uninstalling the Chart

To uninstall/delete the my-release deployment:

console
$ helm delete my-release

The command removes nearly all the Kubernetes components associated with the chart and deletes the release.

Configuration

The following table lists the configurable parameters of the vaultingkube chart and their default values.

ParameterDescriptionDefault
replicaCountNumber of replicas of the vaultingkube pod1
images.repositoryvaultingkube image repositorysunshinekitty/vaultingkube
images.tagvaultingkube image tagv0.1.0
images.pullPolicyvaultingkube image pull policyAlways if imageTag is latest, else IfNotPresent
vaultAddressAddress of the Vault that vaultingkube will queryNone. You must supply one.
vaultTokenToken used by vaultingkube to query VaultNone. You must supply one.
deleteOldEnable deletion of K8s managed secrets that were deleted from Vault"true"
syncPeriodFrequency at which vaultingkube will check Vault new or removed secrets"60"
vaultRootMountPathSecret path in Vault that vaultingkube will sync fromNone. You must supply one
nodeSelectorNode labels for pod assignment{}
tolerationsList of node taints to tolerate[]
affinityAffinity settings for pod assignment{}
rbac.createIf true, create and use RBAC resourcestrue
serviceAccount.createIf true, create a new service accounttrue
serviceAccount.nameService account to be used. If not set and serviceAccount.create is true, a name is generated using the fullname template``