vault helm release - kubesearch

No introduction found. Create it?

Name	Repo	Stars	Version	Timestamp
vault	coolguy1771/home-ops	52	0.27.0	3 months ago
vault	h3mmy/bloopySphere	49	0.27.0	4 months ago

Name

Repo

Stars

Version

Timestamp

vault

coolguy1771/home-ops

0.27.0

3 months ago

vault

h3mmy/bloopySphere

0.27.0

4 months ago

Key	Types
server.ingress.enabled (7) `true`	boolean
server.ingress.hosts[].host (6) `vault.svc.behn.dev`	string
server.ingress.hosts[].paths[] (4) `- /`	string
server.ingress.ingressClassName (6) `istio`	string
server.ingress.tls[].hosts[] (6) `- vault.svc.behn.dev`	string
server.ingress.tls[].secretName (5) `vault-tls`	string
server.ingress.annotations."cert-manager.io/cluster-issuer" (3) `letsencrypt-production`	string
server.ingress.annotations."hajimari.io/enable" (2) `true`	string
server.ingress.annotations."hajimari.io/icon" (2) `shield-key`	string
server.ingress.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (2) `websecure`	string
server.ingress.annotations."cert-manager.io/common-name" (1) `vault.286k.co`	string
server.ingress.annotations."nginx.ingress.kubernetes.io/backend-protocol" (1) `HTTPS`	string
server.ingress.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1) `networking-rfc1918@kubernetescrd`	string
server.ingress.standalone.config (3) `log_format = "json" log_level = "debug" ui = true cluster_name = "behndev-prod" storage "file" { path = "/vault/data" } # HTTPS listener listener "tcp" { address = "[::]:8200" cluster_address = "[::]:8201" tls_disable = 1 } telemetry { prometheus_retention_time = "24h" disable_hostname = true }`	string
server.ingress.standalone.enabled (3) `true`	boolean
server.ingress.activeService (2) `true`	boolean
server.ingress.pathType (2) `Prefix`	string
server.dataStorage.enabled (6) `true`	boolean
server.dataStorage.storageClass (6) `longhorn`	string
server.dataStorage.size (2) `10Gi`	string
server.dataStorage.mountPath (1) `/vault/data`	string
server.extraVolumes[].name (4) `kms-vault-unseal`	string
server.extraVolumes[].type (4) `secret`	string
server.extraVolumes[].path (3) `/vault/userconfig`	string
server.ha.enabled (4) `true`	boolean
server.ha.raft.config (4) ui = true listener "tcp" { address = "[::]:8200" cluster_address = "[::]:8201" tls_cert_file = "/vault/userconfig/tls-server/tls-combined.pem" tls_key_file = "/vault/userconfig/tls-server/tls.key" # tls_client_ca_file = "/vault/tls-server/client-auth-ca.pem" # Enable unauthenticated metrics access (necessary for Prometheus Operator) telemetry { unauthenticated_metrics_access = "true" } } seal "awskms" { region = "us-east-1" } storage "raft" { path = "/vault/data" retry_join { leader_api_addr = "https://vault-0.vault-internal:8200" leader_ca_cert_file = "/vault/userconfig/tls-server/ca.crt" leader_client_cert_file = "/vault/userconfig/tls-server/tls.crt" leader_client_key_file = "/vault/userconfig/tls-server/tls.key" } } service_registration "kubernetes" {}	string
server.ha.raft.enabled (4) `true`	boolean
server.ha.raft.setNodeId (4) `true`	boolean
server.ha.replicas (4) `3`	number
server.logFormat (4) `json`	string
server.readinessProbe.enabled (4) `true`	boolean
server.readinessProbe.path (4) `/v1/sys/health?standbyok=true&sealedcode=204&uninitcode=204`	string
server.resources.limits.memory (4) `256Mi`	string
server.resources.limits.cpu (1) `500m`	string
server.resources.requests.cpu (4) `250m`	string
server.resources.requests.memory (4) `256Mi`	string
server.updateStrategyType (4) `RollingUpdate`	string
server.auditStorage.enabled (3) `true`	boolean
server.auditStorage.storageClass (3) `ceph-rbd`	string
server.auditStorage.size (2) `10Gi`	string
server.auditStorage.mountPath (1) `/vault/audit`	string
server.enabled (3) `true`	boolean
server.extraEnvironmentVars.GOOGLE_APPLICATION_CREDENTIALS (3) `/vault/userconfig/kms-vault-unseal/serviceaccount.json`	string
server.extraEnvironmentVars.TZ (3) `${TZ}`	string
server.extraEnvironmentVars.VAULT_CACERT (1) `/vault/userconfig/tls-server/ca.crt`	string
server.extraEnvironmentVars.VAULT_TOKEN (1) `${SECRET_VAULT_TOKEN}`	string
server.extraLabels."configmap.reloader.stakater.com/reload" (3) `vault-config`	string
server.standalone.enabled (3) `false`	boolean
server.standalone.config (1) ui = true storage "file" { path = "/vault/data" } #seal "transit" { # disabled = "false" # address = "${SECRET_VAULT_URL}" # token = "${SECRET_VAULT_TOKEN}" # disable_renewal = "false" # key_name = "autounseal" # mount_path = "transit/" # tls_skip_verify = "true" #} seal "gcpckms" { disabled = "false" project = "${SECRET_GCP_PROJECT}" region = "europe-west3" key_ring = "home-infra" crypto_key = "vault-unseal" } listener "tcp" { tls_disable = 1 address = "[::]:8200" cluster_address = "[::]:8201" telemetry { unauthenticated_metrics_access = "true" } } telemetry { prometheus_retention_time = "24h", disable_hostname = true } # service_registration "kubernetes" {}	string
server.annotations."backup.velero.io/backup-volumes" (1) `data`	string
server.authDelegator.enabled (1) `true`	boolean
server.extraArgs (1)	string
server.extraSecretEnvironmentVars[].envName (1) `AWS_SECRET_ACCESS_KEY AWS_ACCESS_KEY_ID VAULT_AWSKMS_SEAL_KEY_ID`	string
server.extraSecretEnvironmentVars[].secretKey (1) `AWS_SECRET_ACCESS_KEY AWS_ACCESS_KEY_ID VAULT_AWSKMS_SEAL_KEY_ID`	string
server.extraSecretEnvironmentVars[].secretName (1) `vault-secret vault-secret vault-secret`	string
server.image.repository (1) `proxy.registry.beryju.org/hashicorp/vault`	string
server.livenessProbe.enabled (1) `true`	boolean
server.livenessProbe.initialDelaySeconds (1) `60`	number
server.livenessProbe.path (1) `/v1/sys/health?standbyok=true`	string
server.logLevel (1) `info`	string
server.networkPolicy.enabled (1) `false`	boolean
server.service.active.enabled (1) `true`	boolean
server.service.enabled (1) `true`	boolean
server.service.instanceSelector.enabled (1) `true`	boolean
server.service.standby.enabled (1) `true`	boolean
server.tolerations (1) `- key: "arm" operator: "Exists"`	string
ui.enabled (6) `true`	boolean
ui.serviceType (4) `ClusterIP`	string
ui.activeVaultPodOnly (1) `true`	boolean
ui.externalPort (1) `8200`	number
ui.publishNotReadyAddresses (1) `true`	boolean
ui.targetPort (1) `8200`	number
global.enabled (4) `false`	boolean
global.serverTelemetry.prometheusOperator (1) `true`	boolean
global.tlsDisable (1) `false`	boolean
csi.enabled (3) `true`	boolean
csi.agent.enabled (1) `true`	boolean
csi.agent.image.pullPolicy (1) `IfNotPresent`	string
csi.agent.image.repository (1) `hashicorp/vault`	string
csi.agent.image.tag (1) `1.15.4`	string
csi.agent.logFormat (1) `json`	string
csi.agent.logLevel (1) `info`	string
csi.image.pullPolicy (1) `IfNotPresent`	string
csi.image.repository (1) `hashicorp/vault-csi-provider`	string
csi.image.tag (1) `1.4.1`	string
metrics.enabled (3) `true`	boolean
service.enabled (3) `true`	boolean
ingress.annotations (1) `kubernetes.io/ingress.class: nginx hajimari.io/enable: "true" hajimari.io/icon: "bank"`	string
ingress.enabled (1) `true`	boolean
ingress.hosts[].host (1) `vault.${SECRET_DOMAIN}`	string
ingress.hosts[].paths[] (1) `- /`	string
ingress.tls[].hosts[] (1) `- vault.${SECRET_DOMAIN}`	string
ingress.tls[].secretName (1) `vault-tls`	string
injector.failurePolicy (1) `Ignore`	string
injector.leaderElector.enabled (1) `true`	boolean
injector.logFormat (1) `json`	string
injector.logLevel (1) `info`	string
injector.metrics.enabled (1) `true`	boolean
injector.replicas (1) `1`	number
injector.resources.limits.cpu (1) `250m`	string
injector.resources.limits.memory (1) `256Mi`	string
injector.resources.requests.cpu (1) `250m`	string
injector.resources.requests.memory (1) `256Mi`	string
injector.revokeOnShutdown (1) `true`	boolean
injector.webhook.failurePolicy (1) `Ignore`	string
injector.webhook.matchPolicy (1) `Exact`	string
injector.webhook.timeoutSeconds (1) `30`	number
serverTelemetry.prometheusRules.enabled (1) `true`	boolean
serverTelemetry.prometheusRules.rules[].alert (1) `vault-HighResponseTime vault-HighResponseTime`	string
serverTelemetry.prometheusRules.rules[].annotations.message (1) `The response time of Vault is over 500ms on average over the last 5 minutes. The response time of Vault is over 1s on average over the last 5 minutes.`	string
serverTelemetry.prometheusRules.rules[].expr (1) `vault_core_handle_request{quantile="0.5", namespace="vault-system"} > 500 vault_core_handle_request{quantile="0.5", namespace="vault-system"} > 1000`	string
serverTelemetry.prometheusRules.rules[].for (1) `5m 5m`	string
serverTelemetry.prometheusRules.rules[].labels.severity (1) `warning critical`	string
serverTelemetry.serviceMonitor.enabled (1) `true`	boolean

Key

Types

server.ingress.enabled (7)

true

boolean

server.ingress.hosts[].host (6)

vault.svc.behn.dev

string

server.ingress.hosts[].paths[] (4)

- /

string

server.ingress.ingressClassName (6)

istio

string

server.ingress.tls[].hosts[] (6)

- vault.svc.behn.dev

string

server.ingress.tls[].secretName (5)

vault-tls

string

server.ingress.annotations."cert-manager.io/cluster-issuer" (3)

letsencrypt-production

string

server.ingress.annotations."hajimari.io/enable" (2)

true

string

server.ingress.annotations."hajimari.io/icon" (2)

shield-key

string

server.ingress.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (2)

websecure

string

server.ingress.annotations."cert-manager.io/common-name" (1)

vault.286k.co

string

server.ingress.annotations."nginx.ingress.kubernetes.io/backend-protocol" (1)

HTTPS

string

server.ingress.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1)

networking-rfc1918@kubernetescrd

string

server.ingress.standalone.config (3)

log_format = "json"
log_level = "debug"
ui = true
cluster_name = "behndev-prod"
storage "file" {
  path = "/vault/data"
}
# HTTPS listener
listener "tcp" {
  address = "[::]:8200"
  cluster_address = "[::]:8201"
  tls_disable = 1
}
telemetry {
  prometheus_retention_time = "24h"
  disable_hostname = true
}

string

server.ingress.standalone.enabled (3)

true

boolean

server.ingress.activeService (2)

true

boolean

server.ingress.pathType (2)

Prefix

string

server.dataStorage.enabled (6)

true

boolean

server.dataStorage.storageClass (6)

longhorn

string

server.dataStorage.size (2)

10Gi

string

server.dataStorage.mountPath (1)

/vault/data

string

server.extraVolumes[].name (4)

kms-vault-unseal

string

server.extraVolumes[].type (4)

secret

string

server.extraVolumes[].path (3)

/vault/userconfig

string

server.ha.enabled (4)

true

boolean

server.ha.raft.config (4)

ui = true

listener "tcp" {
  address = "[::]:8200"
  cluster_address = "[::]:8201"
  tls_cert_file = "/vault/userconfig/tls-server/tls-combined.pem"
  tls_key_file = "/vault/userconfig/tls-server/tls.key"
  # tls_client_ca_file = "/vault/tls-server/client-auth-ca.pem"
  # Enable unauthenticated metrics access (necessary for Prometheus Operator)
  telemetry {
    unauthenticated_metrics_access = "true"
  }
}
seal "awskms" {
  region     = "us-east-1"
}
storage "raft" {
  path = "/vault/data"
    retry_join {
    leader_api_addr = "https://vault-0.vault-internal:8200"
    leader_ca_cert_file = "/vault/userconfig/tls-server/ca.crt"
    leader_client_cert_file = "/vault/userconfig/tls-server/tls.crt"
    leader_client_key_file = "/vault/userconfig/tls-server/tls.key"
  }
}
service_registration "kubernetes" {}

string

server.ha.raft.enabled (4)

true

boolean

server.ha.raft.setNodeId (4)

true

boolean

server.ha.replicas (4)

number

server.logFormat (4)

json

string

server.readinessProbe.enabled (4)

true

boolean

server.readinessProbe.path (4)

/v1/sys/health?standbyok=true&sealedcode=204&uninitcode=204

string

server.resources.limits.memory (4)

256Mi

string

server.resources.limits.cpu (1)

500m

string

server.resources.requests.cpu (4)

250m

string

server.resources.requests.memory (4)

256Mi

string

server.updateStrategyType (4)

RollingUpdate

string

server.auditStorage.enabled (3)

true

boolean

server.auditStorage.storageClass (3)

ceph-rbd

string

server.auditStorage.size (2)

10Gi

string

server.auditStorage.mountPath (1)

/vault/audit

string

server.enabled (3)

true

boolean

server.extraEnvironmentVars.GOOGLE_APPLICATION_CREDENTIALS (3)

/vault/userconfig/kms-vault-unseal/serviceaccount.json

string

server.extraEnvironmentVars.TZ (3)

${TZ}

string

server.extraEnvironmentVars.VAULT_CACERT (1)

/vault/userconfig/tls-server/ca.crt

string

server.extraEnvironmentVars.VAULT_TOKEN (1)

${SECRET_VAULT_TOKEN}

string

server.extraLabels."configmap.reloader.stakater.com/reload" (3)

vault-config

string

server.standalone.enabled (3)

false

boolean

server.standalone.config (1)

ui = true
storage "file" {
  path = "/vault/data"
}
#seal "transit" {
#  disabled = "false"
#  address = "${SECRET_VAULT_URL}"
#  token = "${SECRET_VAULT_TOKEN}"
#  disable_renewal = "false"
#  key_name = "autounseal"
#  mount_path = "transit/"
#  tls_skip_verify = "true"
#}
seal "gcpckms" {
  disabled    = "false"
  project     = "${SECRET_GCP_PROJECT}"
  region      = "europe-west3"
  key_ring    = "home-infra"
  crypto_key  = "vault-unseal"
}
listener "tcp" {
  tls_disable = 1
  address = "[::]:8200"
  cluster_address = "[::]:8201"
  telemetry {
    unauthenticated_metrics_access = "true"
  }
}
telemetry {
  prometheus_retention_time = "24h",
  disable_hostname = true
}
# service_registration "kubernetes" {}

string

server.annotations."backup.velero.io/backup-volumes" (1)

data

string

server.authDelegator.enabled (1)

true

boolean

server.extraArgs (1)

string

server.extraSecretEnvironmentVars[].envName (1)

AWS_SECRET_ACCESS_KEY
AWS_ACCESS_KEY_ID
VAULT_AWSKMS_SEAL_KEY_ID

string

server.extraSecretEnvironmentVars[].secretKey (1)

AWS_SECRET_ACCESS_KEY
AWS_ACCESS_KEY_ID
VAULT_AWSKMS_SEAL_KEY_ID

string

server.extraSecretEnvironmentVars[].secretName (1)

vault-secret
vault-secret
vault-secret

string

server.image.repository (1)

proxy.registry.beryju.org/hashicorp/vault

string

server.livenessProbe.enabled (1)

true

boolean

server.livenessProbe.initialDelaySeconds (1)

number

server.livenessProbe.path (1)

/v1/sys/health?standbyok=true

string

server.logLevel (1)

info

string

server.networkPolicy.enabled (1)

false

boolean

server.service.active.enabled (1)

true

boolean

server.service.enabled (1)

true

boolean

server.service.instanceSelector.enabled (1)

true

boolean

server.service.standby.enabled (1)

true

boolean

server.tolerations (1)

- key: "arm"
  operator: "Exists"

string

ui.enabled (6)

true

boolean

ui.serviceType (4)

ClusterIP

string

ui.activeVaultPodOnly (1)

true

boolean

ui.externalPort (1)

number

ui.publishNotReadyAddresses (1)

true

boolean

ui.targetPort (1)

number

global.enabled (4)

false

boolean

global.serverTelemetry.prometheusOperator (1)

true

boolean

global.tlsDisable (1)

false

boolean

csi.enabled (3)

true

boolean

csi.agent.enabled (1)

true

boolean

csi.agent.image.pullPolicy (1)

IfNotPresent

string

csi.agent.image.repository (1)

hashicorp/vault

string

csi.agent.image.tag (1)

1.15.4

string

csi.agent.logFormat (1)

json

string

csi.agent.logLevel (1)

info

string

csi.image.pullPolicy (1)

IfNotPresent

string

csi.image.repository (1)

hashicorp/vault-csi-provider

string

csi.image.tag (1)

1.4.1

string

metrics.enabled (3)

true

boolean

service.enabled (3)

true

boolean

ingress.annotations (1)

kubernetes.io/ingress.class: nginx
hajimari.io/enable: "true"
hajimari.io/icon: "bank"

string

ingress.enabled (1)

true

boolean

ingress.hosts[].host (1)

vault.${SECRET_DOMAIN}

string

ingress.hosts[].paths[] (1)

- /

string

ingress.tls[].hosts[] (1)

- vault.${SECRET_DOMAIN}

string

ingress.tls[].secretName (1)

vault-tls

string

injector.failurePolicy (1)

Ignore

string

injector.leaderElector.enabled (1)

true

boolean

injector.logFormat (1)

json

string

injector.logLevel (1)

info

string

injector.metrics.enabled (1)

true

boolean

injector.replicas (1)

number

injector.resources.limits.cpu (1)

250m

string

injector.resources.limits.memory (1)

256Mi

string

injector.resources.requests.cpu (1)

250m

string

injector.resources.requests.memory (1)

256Mi

string

injector.revokeOnShutdown (1)

true

boolean

injector.webhook.failurePolicy (1)

Ignore

string

injector.webhook.matchPolicy (1)

Exact

string

injector.webhook.timeoutSeconds (1)

number

serverTelemetry.prometheusRules.enabled (1)

true

boolean

serverTelemetry.prometheusRules.rules[].alert (1)

vault-HighResponseTime
vault-HighResponseTime

string

serverTelemetry.prometheusRules.rules[].annotations.message (1)

The response time of Vault is over 500ms on average over the last 5 minutes.
The response time of Vault is over 1s on average over the last 5 minutes.

string

serverTelemetry.prometheusRules.rules[].expr (1)

vault_core_handle_request{quantile="0.5", namespace="vault-system"} > 500
vault_core_handle_request{quantile="0.5", namespace="vault-system"} > 1000

string

serverTelemetry.prometheusRules.rules[].for (1)

5m
5m

string

serverTelemetry.prometheusRules.rules[].labels.severity (1)

warning
critical

string

serverTelemetry.serviceMonitor.enabled (1)

true

boolean

vault helm

Install

Examples

Top Repositories (2 out of 9)

Values