alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Activity

feat: update unseal
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 37s
Details
lint-test-helm / validate-kubeconform (pull_request) Successful in 40s
Details
lint-test-helm / argo-diff (pull_request) Successful in 44s
Details
render-manifests / render-manifests (pull_request) Successful in 1m4s
Details

Browse Source
This commit is contained in:
Alex Lebens
2026-04-12 19:35:20 -05:00
parent 8ab2c2ff87
commit 5c0f3d5b4e
2 changed files with 24 additions and 84 deletions
Download Patch File Download Diff File Expand all files Collapse all files

102
clusters/cl01tl/helm/vault/templates/external-secret.yaml
View File

@@ -138,40 +138,20 @@ spec:
data: data:
- secretKey: ENVIRONMENT - secretKey: ENVIRONMENT
remoteRef: remoteRef:
key: /cl01tl/vault/unseal/config-1 key: /cl01tl/vault/unseal
property: ENVIRONMENT property: ENVIRONMENT
- secretKey: CHECK_INTERVAL
remoteRef:
key: /cl01tl/vault/unseal/config-1
property: CHECK_INTERVAL
- secretKey: MAX_CHECK_INTERVAL
remoteRef:
key: /cl01tl/vault/unseal/config-1
property: MAX_CHECK_INTERVAL
- secretKey: NODES - secretKey: NODES
remoteRef: remoteRef:
key: /cl01tl/vault/unseal/config-1 key: /cl01tl/vault/unseal
property: NODES property: NODES
- secretKey: TLS_SKIP_VERIFY
remoteRef:
key: /cl01tl/vault/unseal/config-1
property: TLS_SKIP_VERIFY
- secretKey: TOKENS - secretKey: TOKENS
remoteRef: remoteRef:
key: /cl01tl/vault/unseal/config-1 key: /cl01tl/vault/unseal
property: TOKENS property: TOKENS_1
- secretKey: EMAIL_ENABLED - secretKey: NOTIFY_QUEUE_URLS
remoteRef: remoteRef:
key: /cl01tl/vault/unseal/config-1 key: /cl01tl/vault/unseal
property: EMAIL_ENABLED property: NOTIFY_QUEUE_URLS
- secretKey: NOTIFY_MAX_ELAPSED
remoteRef:
key: /cl01tl/vault/unseal/config-1
property: NOTIFY_MAX_ELAPSED
- secretKey: NOTIFY_QUEUE_DELAY
remoteRef:
key: /cl01tl/vault/unseal/config-1
property: NOTIFY_QUEUE_DELAY
--- ---
apiVersion: external-secrets.io/v1 apiVersion: external-secrets.io/v1
@@ -190,40 +170,20 @@ spec:
data: data:
- secretKey: ENVIRONMENT - secretKey: ENVIRONMENT
remoteRef: remoteRef:
key: /cl01tl/vault/unseal/config-2 key: /cl01tl/vault/unseal
property: ENVIRONMENT property: ENVIRONMENT
- secretKey: CHECK_INTERVAL
remoteRef:
key: /cl01tl/vault/unseal/config-2
property: CHECK_INTERVAL
- secretKey: MAX_CHECK_INTERVAL
remoteRef:
key: /cl01tl/vault/unseal/config-2
property: MAX_CHECK_INTERVAL
- secretKey: NODES - secretKey: NODES
remoteRef: remoteRef:
key: /cl01tl/vault/unseal/config-2 key: /cl01tl/vault/unseal
property: NODES property: NODES
- secretKey: TLS_SKIP_VERIFY
remoteRef:
key: /cl01tl/vault/unseal/config-2
property: TLS_SKIP_VERIFY
- secretKey: TOKENS - secretKey: TOKENS
remoteRef: remoteRef:
key: /cl01tl/vault/unseal/config-2 key: /cl01tl/vault/unseal
property: TOKENS property: TOKENS_2
- secretKey: EMAIL_ENABLED - secretKey: NOTIFY_QUEUE_URLS
remoteRef: remoteRef:
key: /cl01tl/vault/unseal/config-2 key: /cl01tl/vault/unseal
property: EMAIL_ENABLED property: NOTIFY_QUEUE_URLS
- secretKey: NOTIFY_MAX_ELAPSED
remoteRef:
key: /cl01tl/vault/unseal/config-2
property: NOTIFY_MAX_ELAPSED
- secretKey: NOTIFY_QUEUE_DELAY
remoteRef:
key: /cl01tl/vault/unseal/config-2
property: NOTIFY_QUEUE_DELAY
--- ---
apiVersion: external-secrets.io/v1 apiVersion: external-secrets.io/v1
@@ -242,40 +202,20 @@ spec:
data: data:
- secretKey: ENVIRONMENT - secretKey: ENVIRONMENT
remoteRef: remoteRef:
key: /cl01tl/vault/unseal/config-3 key: /cl01tl/vault/unseal
property: ENVIRONMENT property: ENVIRONMENT
- secretKey: CHECK_INTERVAL
remoteRef:
key: /cl01tl/vault/unseal/config-3
property: CHECK_INTERVAL
- secretKey: MAX_CHECK_INTERVAL
remoteRef:
key: /cl01tl/vault/unseal/config-3
property: MAX_CHECK_INTERVAL
- secretKey: NODES - secretKey: NODES
remoteRef: remoteRef:
key: /cl01tl/vault/unseal/config-3 key: /cl01tl/vault/unseal
property: NODES property: NODES
- secretKey: TLS_SKIP_VERIFY
remoteRef:
key: /cl01tl/vault/unseal/config-3
property: TLS_SKIP_VERIFY
- secretKey: TOKENS - secretKey: TOKENS
remoteRef: remoteRef:
key: /cl01tl/vault/unseal/config-3 key: /cl01tl/vault/unseal
property: TOKENS property: TOKENS_3
- secretKey: EMAIL_ENABLED - secretKey: NOTIFY_QUEUE_URLS
remoteRef: remoteRef:
key: /cl01tl/vault/unseal/config-3 key: /cl01tl/vault/unseal
property: EMAIL_ENABLED property: NOTIFY_QUEUE_URLS
- secretKey: NOTIFY_MAX_ELAPSED
remoteRef:
key: /cl01tl/vault/unseal/config-3
property: NOTIFY_MAX_ELAPSED
- secretKey: NOTIFY_QUEUE_DELAY
remoteRef:
key: /cl01tl/vault/unseal/config-3
property: NOTIFY_QUEUE_DELAY
--- ---
apiVersion: external-secrets.io/v1 apiVersion: external-secrets.io/v1

6
clusters/cl01tl/helm/vault/values.yaml
View File

@@ -272,7 +272,7 @@ unseal:
main: main:
image: image:
repository: ghcr.io/lrstanley/vault-unseal repository: ghcr.io/lrstanley/vault-unseal
tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
envFrom: envFrom:
- secretRef: - secretRef:
name: vault-unseal-config-1 name: vault-unseal-config-1
@@ -288,7 +288,7 @@ unseal:
main: main:
image: image:
repository: ghcr.io/lrstanley/vault-unseal repository: ghcr.io/lrstanley/vault-unseal
tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
envFrom: envFrom:
- secretRef: - secretRef:
name: vault-unseal-config-2 name: vault-unseal-config-2
@@ -304,7 +304,7 @@ unseal:
main: main:
image: image:
repository: ghcr.io/lrstanley/vault-unseal repository: ghcr.io/lrstanley/vault-unseal
tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
envFrom: envFrom:
- secretRef: - secretRef:
name: vault-unseal-config-3 name: vault-unseal-config-3