alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Activity

Merge pull request 'feat: update unseal' (#5842) from tmp/vault into main
Some checks failed
lint-test-helm / lint-helm (push) Successful in 25s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
lint-test-helm / argo-diff (push) Has been skipped
Details
renovate / renovate (push) Has been cancelled
Details

Browse Source 
Reviewed-on: #5842
This commit was merged in pull request #5842.
This commit is contained in:
Alex Lebens
2026-04-13 00:44:31 +00:00
parent 8ab2c2ff87 5c0f3d5b4e
commit 54e2cd4c43
2 changed files with 24 additions and 84 deletions
Download Patch File Download Diff File Expand all files Collapse all files

102
clusters/cl01tl/helm/vault/templates/external-secret.yaml
View File

@@ -138,40 +138,20 @@ spec:
data:
- secretKey: ENVIRONMENT
remoteRef:
key: /cl01tl/vault/unseal/config-1
key: /cl01tl/vault/unseal
property: ENVIRONMENT
- secretKey: CHECK_INTERVAL
remoteRef:
key: /cl01tl/vault/unseal/config-1
property: CHECK_INTERVAL
- secretKey: MAX_CHECK_INTERVAL
remoteRef:
key: /cl01tl/vault/unseal/config-1
property: MAX_CHECK_INTERVAL
- secretKey: NODES
remoteRef:
key: /cl01tl/vault/unseal/config-1
key: /cl01tl/vault/unseal
property: NODES
- secretKey: TLS_SKIP_VERIFY
remoteRef:
key: /cl01tl/vault/unseal/config-1
property: TLS_SKIP_VERIFY
- secretKey: TOKENS
remoteRef:
key: /cl01tl/vault/unseal/config-1
property: TOKENS
- secretKey: EMAIL_ENABLED
key: /cl01tl/vault/unseal
property: TOKENS_1
- secretKey: NOTIFY_QUEUE_URLS
remoteRef:
key: /cl01tl/vault/unseal/config-1
property: EMAIL_ENABLED
- secretKey: NOTIFY_MAX_ELAPSED
remoteRef:
key: /cl01tl/vault/unseal/config-1
property: NOTIFY_MAX_ELAPSED
- secretKey: NOTIFY_QUEUE_DELAY
remoteRef:
key: /cl01tl/vault/unseal/config-1
property: NOTIFY_QUEUE_DELAY
key: /cl01tl/vault/unseal
property: NOTIFY_QUEUE_URLS
---
apiVersion: external-secrets.io/v1
@@ -190,40 +170,20 @@ spec:
data:
- secretKey: ENVIRONMENT
remoteRef:
key: /cl01tl/vault/unseal/config-2
key: /cl01tl/vault/unseal
property: ENVIRONMENT
- secretKey: CHECK_INTERVAL
remoteRef:
key: /cl01tl/vault/unseal/config-2
property: CHECK_INTERVAL
- secretKey: MAX_CHECK_INTERVAL
remoteRef:
key: /cl01tl/vault/unseal/config-2
property: MAX_CHECK_INTERVAL
- secretKey: NODES
remoteRef:
key: /cl01tl/vault/unseal/config-2
key: /cl01tl/vault/unseal
property: NODES
- secretKey: TLS_SKIP_VERIFY
remoteRef:
key: /cl01tl/vault/unseal/config-2
property: TLS_SKIP_VERIFY
- secretKey: TOKENS
remoteRef:
key: /cl01tl/vault/unseal/config-2
property: TOKENS
- secretKey: EMAIL_ENABLED
key: /cl01tl/vault/unseal
property: TOKENS_2
- secretKey: NOTIFY_QUEUE_URLS
remoteRef:
key: /cl01tl/vault/unseal/config-2
property: EMAIL_ENABLED
- secretKey: NOTIFY_MAX_ELAPSED
remoteRef:
key: /cl01tl/vault/unseal/config-2
property: NOTIFY_MAX_ELAPSED
- secretKey: NOTIFY_QUEUE_DELAY
remoteRef:
key: /cl01tl/vault/unseal/config-2
property: NOTIFY_QUEUE_DELAY
key: /cl01tl/vault/unseal
property: NOTIFY_QUEUE_URLS
---
apiVersion: external-secrets.io/v1
@@ -242,40 +202,20 @@ spec:
data:
- secretKey: ENVIRONMENT
remoteRef:
key: /cl01tl/vault/unseal/config-3
key: /cl01tl/vault/unseal
property: ENVIRONMENT
- secretKey: CHECK_INTERVAL
remoteRef:
key: /cl01tl/vault/unseal/config-3
property: CHECK_INTERVAL
- secretKey: MAX_CHECK_INTERVAL
remoteRef:
key: /cl01tl/vault/unseal/config-3
property: MAX_CHECK_INTERVAL
- secretKey: NODES
remoteRef:
key: /cl01tl/vault/unseal/config-3
key: /cl01tl/vault/unseal
property: NODES
- secretKey: TLS_SKIP_VERIFY
remoteRef:
key: /cl01tl/vault/unseal/config-3
property: TLS_SKIP_VERIFY
- secretKey: TOKENS
remoteRef:
key: /cl01tl/vault/unseal/config-3
property: TOKENS
- secretKey: EMAIL_ENABLED
key: /cl01tl/vault/unseal
property: TOKENS_3
- secretKey: NOTIFY_QUEUE_URLS
remoteRef:
key: /cl01tl/vault/unseal/config-3
property: EMAIL_ENABLED
- secretKey: NOTIFY_MAX_ELAPSED
remoteRef:
key: /cl01tl/vault/unseal/config-3
property: NOTIFY_MAX_ELAPSED
- secretKey: NOTIFY_QUEUE_DELAY
remoteRef:
key: /cl01tl/vault/unseal/config-3
property: NOTIFY_QUEUE_DELAY
key: /cl01tl/vault/unseal
property: NOTIFY_QUEUE_URLS
---
apiVersion: external-secrets.io/v1

6
clusters/cl01tl/helm/vault/values.yaml
View File

@@ -272,7 +272,7 @@ unseal:
main:
image:
repository: ghcr.io/lrstanley/vault-unseal
tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c
tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
envFrom:
- secretRef:
name: vault-unseal-config-1
@@ -288,7 +288,7 @@ unseal:
main:
image:
repository: ghcr.io/lrstanley/vault-unseal
tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c
tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
envFrom:
- secretRef:
name: vault-unseal-config-2
@@ -304,7 +304,7 @@ unseal:
main:
image:
repository: ghcr.io/lrstanley/vault-unseal
tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c
tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
envFrom:
- secretRef:
name: vault-unseal-config-3