Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Vault installation chart #76

Closed
wants to merge 3 commits into from
Closed

Add Vault installation chart #76

wants to merge 3 commits into from

Conversation

pratik705
Copy link
Contributor

Uses kustomize to deploy vault helm chart.

  • Prior installation:
    • It requires some storage available in the cluster. As user will install vault prior deploying CEPH, the cluster will not be having any storage configured. Hence, we need to consider local storage from the Kubernetes nodes. We can go with Rancher local path provisioner for the same[1].
    • It expects vault-tls-public Kubernetes secret containing FQDN ssl cert/key. We can encrypt "vault-tls-public" using sealed-secret and push to git to consume it using argocd.

[1]
https://github.com/rancher/local-path-provisioner

@cloudnull cloudnull requested a review from sulochan February 20, 2024 16:50
Copy link
Collaborator

@sulochan sulochan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we add some documentation for this in /docs please ?
In particular install method should include instruction on how to init vault and handle the unseal keys, the admin token etc.
The overall architecture we are going for here. It would be nice to have a blueprint type doc since this is a big change to how everyone is used to handling secrets/config data and it is important we make our vision clear to users and the logic behind it.

I will sync with you offline to help with the content structrue.

@cloudnull cloudnull closed this Feb 26, 2024
@cloudnull cloudnull reopened this Feb 26, 2024
@cloudnull
Copy link
Contributor

closed because this pr isn't able to be merged - #87

@cloudnull cloudnull closed this Feb 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants