diff --git a/consul/Chart.yaml b/consul/Chart.yaml new file mode 100644 index 0000000000000000000000000000000000000000..432cc2b507c102646139cba82916a654f768d3c7 --- /dev/null +++ b/consul/Chart.yaml @@ -0,0 +1,5 @@ +apiVersion: v1 +appVersion: "1.0" +description: Consul cluster +name: consul +version: 1.4.0 diff --git a/consul/NOTES.txt b/consul/NOTES.txt new file mode 100644 index 0000000000000000000000000000000000000000..e69de29bb2d1d6434b8b29ae775ad8c2e48c5391 diff --git a/consul/certs/ca.pem b/consul/certs/ca.pem new file mode 100644 index 0000000000000000000000000000000000000000..f813ad79ecbc15b3c24c4c9610e7c30f20492d35 --- /dev/null +++ b/consul/certs/ca.pem @@ -0,0 +1,30 @@ +-----BEGIN CERTIFICATE----- +MIIFHjCCAwagAwIBAgIUX0BP3+wcb+y53zvCUe5sVlXXGAQwDQYJKoZIhvcNAQEN +BQAwFTETMBEGA1UEChMKS3ViZXJuZXRlczAeFw0xOTAyMDQwNjU5MDBaFw0yNDAy +MDMwNjU5MDBaMBUxEzARBgNVBAoTCkt1YmVybmV0ZXMwggIiMA0GCSqGSIb3DQEB +AQUAA4ICDwAwggIKAoICAQDtNXoyR1bM0WyBqNjHolYuLNf7nmpBYyQwzlllPR03 +7b07LdMLgVg6CRFVA04cTfC4z1D3Tk8RhYNp1PuTNxzZ/FsEATaF5zWpgaDA5pfd +nTEnUa8EpV8Lh5aeSQLdoML2cNQ2laf0PMAn+tD2wteoNVjUE23rtk5r2+YLkf/I +w62ThUSnf3xVLZ5LX846rUbG5qVsO3p1xABsbBd2YALKgoriCPfkZHlA9KLkug2T +EWh9eKSkw/cs/+uQWrcCxFO8hFR3hrJEuBy1DPmxPMDyW6jp9YR3OZJCV6PiTRxP +9ET9aGyCJbZgapn2SWggIXDX1Xs768Eb7mW6d0CjMtfV1tu+Y7BfmBVNx282g05k +2zEohPIQIOoGEzIv7CX09QN/kNWohkvjkI7xOgIkPxqcdo++UOezs1Lv8ccaJnTy +YOhq2zb1+kbvkrhms1iepOgf1/sDhuuO/GJ++jbTefUd10T89xm7IwChJFBIn5BF +56vVSAEYg2OP4/bIFvF5c4PXu56uemLhaQdxLQQlf9n+Fq+05CVSeLR1YOvM6vOl +c26iwnLfeqP+fldbxKSuYBDBYjgpw9qOnQmffHSmmAy54xdmn5yIzHfKFgKrOOXl +TDrR19iIY66/lCmPOHAQra/Zyhu4gENV7SlPt1owCZHZh0N7tMjtf47FLU7R9RuW +eQIDAQABo2YwZDAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIBAjAd +BgNVHQ4EFgQUJaT4aQGLmcbsxaeUr2pdvlbX3G0wHwYDVR0jBBgwFoAUJaT4aQGL +mcbsxaeUr2pdvlbX3G0wDQYJKoZIhvcNAQENBQADggIBAABdc0x1wzeeDMNiFC6E +tuVa+l3dsqkKBFPdLDDj3CC1zoRTiRrK7v2ZSHRwB3x+0pfaAODjFzk9knyxvuRo +aINbSrw29Vh4fxk5nYWoo8Nxe93ooe2ydeNFeG+UQpfIEjnQU7aliVZ08vsyGr8q +A4TgdyfFgpUBO7GlWVnntTyBtIVIpd4pGIKgFDKsWxCuuZL5Re0YMhmFaobf08yB +o7poxRuP5UPrXLv8mVUZ+GS/wV+93SOiZyhrGLHRbyaCape5nArzWvscxuJshHja +wMl85HRyhg4a5AQTs7p8lgRzeF76FU2YpQVUZQ2FlrYZV0eUQgQyPFkCl7ulKZSK +JuJMYqhAGGDg5G6Ntk7/u3SnkBFqo5lkOSGyZ4vBpi9YZGiIyF2F39jHwPuAhtGt ++mIiW/AOv6AhD9DWIlu47K9vb3D6JAUplUu/bcH3Jk69B5+0JlPXhHbhZw6mHGqk +9MKmJ44dtSziHRiDXjjKyiXpJO9VOlTt81Kp2u52jBUnG2ZmdLIysbKc7F3gNTA9 +QASOv8XmWhdl33yqXGRDTmAv3wH2DYE+gaPhj9+z693/CGjZIfWizSDTVPP7vUDG +7stAk2hG4ygJLvqMLbuGx528w4qFPlz1eGWYAni5YY2eDU6R5UjLRburRZ0oy/Vf +1+f9J333pqL0oY32zY1QOo34 +-----END CERTIFICATE----- diff --git a/consul/certs/consul-key.pem b/consul/certs/consul-key.pem new file mode 100644 index 0000000000000000000000000000000000000000..254477bc1b48841ed2fef710277cdb7f3af2d399 --- /dev/null +++ b/consul/certs/consul-key.pem @@ -0,0 +1,51 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIJKAIBAAKCAgEA2VP4Hse8nLC00gWbFHHRQXX3eAM3LR4Hxdi1elHSl2BxUPjt +7qJ7XD7OrNUcRYIaHPZbS+m/C1o43qcxDGOIfd7EMp9gDUeUHGygWHzcZ7O4SuY7 +SCbqgbsqw6AFX1XU9dZkUOsWpyXYEdUoDWAZzBbcKOoFdBn54q+jtDovYQFj1piG +ly271nQwZAUiMMUTegz+5GFx8G51ZbnkME5VOebJlodmIhYXE6ESm+l0LDXL77l8 +N1oKOz0mC+Wk5Lka7Uc5KQWnfEAEmKG7vVHEiI9f2fdeceR1qOEOE1VWHxSHIgwV +jwnBwzuwchBufMc8PWLGLUBbGxMLw0lO61+UlPQdV8XKurS/+N1XTtjKpLKjAtZM +03OR+XCjlSsPFDeZGS8ffurVWBgdkjvjnrj+UJGAonCtsi3ZPDQiZcmsgOixMlHv +DGUf5JuwIx/VcA89nV2LY92jug8Udr2VJeiWWZbTKgqnCw66sJAoPoWZSIuKubmH +UBHf5lrnUmUsXfsGFW1dJ2D6kyP51VL+LPLw0b711ugoJf+LtzPZIgWV2YbKfE4i +dxqKr9Zef8dqZ8WcGGpeqJ8y9cTSZidVBwek4GZVosVJxBceou7I/BYKrX9GlEij +vCnQ+FNQ9+r5XIQHurVvQmjGVe8fKFlRdoHu0egGfhBJSjMKDlT9PZZKcOcCAwEA +AQKCAgBcstZYurWW2ECofL+jPtEU7O57gFOeqPqDx2XRIOmErBxpf2Rtr1yTAi9B +xTzj4RSmWeajQLa+buNnBUWElUf4+HYTaaucvnVMkoDqfYe9rAjl2cJbik3ovB8H +hlAEVCYcHjB32260KQ46vQLygZU/WljaEsf0t8fAi052Z4MiC2e8dx6hiV5foPur +Dg2BY+5k1vo6C95/wX3NwDa27BKqOeiujl5gF7AMLV40pqVo3iF4xVNYgM1wayq5 +VGC7NsFniEO3XbQM6XmMaSAdJq1/2jf2Tu84AUy2lhhc4r9zTlw9h44CjxTY47Ll +VGDsVEc7n9AMKTEzITKZP8Gr3/8NqMG63sr7EXY2mEuzEvtyCQFbVG7EkHKWnBUe +KvaURg/IJQZ5pTtPZhtUEf+rJNmC6gbvmYk2qzcvwFt4t8fubnoYMfENhczhvgHg +qd/EWFEBhPvKwz6gD56Bg9Vmtbgcc7rCymK5XOQRNtYk8EJ6OU6xChYXByLfMvyF +wunp8KhgJapwdPS9oTxQWkgAbtrntGMrymopYbKXAEJiGKq81qbVoCS/ZyfI/2G6 +mGulx5v+IzHWUOXWx8CDLvRV4rASeEYGyQrCvcnErRQDMjuYlahXAQmVt/KbCtDT +3GwwsCLgp4OIkeXzvPIee/64UXaSx1/sxOycSiHikaMCaS0+0QKCAQEA7Md28WyW +wXMFgKnPXCf+Um/56JadiIQSyEFvGknd/QHtPrve6qjeVWoXD6BgHEqP94s1blHd +3l8ItwUp2Y6rz1jDWg2+op6ge4ODFGObnyPLW9A87T4c5heQct11jnvjJlBp2Cmc +ouW8D/2+3zkJPWOrXmPfiriBJiXh6sqOxrsHpyf+PFwrV13WxQIK0i8P5V2WH/Ko +8OhbZN3egvN7dgRY2fCmGvGZEC6u8KmgbhUhMx7jtV9gullv+FJuS8glkCuXIYQ9 +aKYW/Px+yY6SOY1xt49NVmIleqH55LUnHD10sGrHq6BReW6A4brOkB9DjPLgX64/ +zz9jUsMdBvRiJQKCAQEA6vhJs3lShf+aO49f0AW/Vgomo4N3ekX5bOC6F9Va5Chg +oE6JkQZRaopcTHIowbGvUMUmFgpumU9HQXLLtJ7wRqK3Wh1ZDYXUuIdWU2v8LrN5 +HslGolvgUmm9ccuJyXS4q8BS4MTwQ/asa3A6nSsghLT7aQxQl57nI8LXxBstAzjl +PbHRJCGwEtnZwLK3jwrZuNHayP84e+3E86fG6qReTykdU9PAJhZB/SCmhyssYPGQ +5JJgwX5hSMCyM0OJaZaIdwcEFXZB3TCZEbeInZ3WNdW8/jMyUJTys/F48t6ZxeaV +HznHFZc7EblEj42IKjvM3jrKyz4TppsrL+RopjKLGwKCAQBN/BAnyd0JT+njC4q5 +To7L9gd4XIr8GIvbGvoNzYBowUazX8s2vHGl7jA0PF0LVF+AZ4AsmpgZknFbXj7/ +Yacivphww5AjHV278H+uqnPqAS8MSVSXytpXyjEQM/JxAEq7JscFpAbr/ABpv+gq +uy1Y48fgacKJfOVEfDuhSh+mQpltq5Vnqe+4cba34klQGqIAqEc2tISB+/WGDjEo +LitenmXpOgJrY2FHXCjQKP4m45ywqp7S8Nv55FUlk3iySvRcPI8lQdm76uAtaLgV +iHiOrhBjJbaSGfdAIbMdabC881zIchLbaw0KkqOuNQmtnC5ycNgHi2uGxdjfvFWG +Id1lAoIBACFvv50okJO88cez+WBy0O1/eEwgcyoVNw9FU3X8yHhbPpTRWEYo7gEJ +O2UtgZs+m8IUq/zK8z4hx/QKT+6eB3clxI2wS3HfL4wqxiAM59AFfiDhZ4nHJT7V +CT5eRndCgtz9+008+SvSuGp5h/3Bm1kHIBesxvMsi5vNKEMh0t/4graqzSYlHRcx +pQkE5ZYXZzAjvMyJdRI9nZ9GqsnNJhaBtUiug1NoK2/H66qkfCY3efTs15PxVgqy +USl2XOGHqFe3yd77+xdsyPt6cJhtU4RJrCFIS8qnx3nPzPRStPMygtn0sN3jrWYy +RQ1giJXp+JdPKniNluJIhnbEPBgabS0CggEBAI+IJXCV9JDoCWe6lchBjV74e90J +lxarRBZm/ZFUYfoxSt6GoYlIt2GSEms7/Lkwn13yNPE98dwJb4+JV+qeqImwjNMk +ilk3YBaz13mH7arfxM1LBPsw2sky65Gjglr39Y3e83GVmZi0gu6193SB3cYWsCVr +p5jotCXDRp/qSShhueluzKSb4P14jbyhAkWbqhbuItFJabTLJqzj/lK1WizFeTLE +GItKdJOgmfJdbSJLjr9GvWVuaoU8bFZFubZgLj/4BkJp6r5LC+pEi8uR9i8OOJfV +JkUy6kbkLBJTFkCWFQVM1300oLOGlP7VNvJSDE1r7/eq7Lz7W+UM9dPOeLo= +-----END RSA PRIVATE KEY----- diff --git a/consul/certs/consul.pem b/consul/certs/consul.pem new file mode 100644 index 0000000000000000000000000000000000000000..30b8553e152e4ae5817254c2e2cc383a6383d285 --- /dev/null +++ b/consul/certs/consul.pem @@ -0,0 +1,33 @@ +-----BEGIN CERTIFICATE----- +MIIFrTCCA5WgAwIBAgIUM1nm7YI8ZZppRfRJXR2ZorBztI0wDQYJKoZIhvcNAQEN +BQAwFTETMBEGA1UEChMKS3ViZXJuZXRlczAeFw0xOTAyMDQwNzAwMDBaFw0yOTAy +MDEwNzAwMDBaME8xDjAMBgNVBAoTBU55bmphMQ8wDQYDVQQLEwZDb25zdWwxLDAq +BgNVBAMTI2NvbnN1bC1zZXJ2aWNlLmNvbnN1bC5jbHVzdGVyLmxvY2FsMIICIjAN +BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2VP4Hse8nLC00gWbFHHRQXX3eAM3 +LR4Hxdi1elHSl2BxUPjt7qJ7XD7OrNUcRYIaHPZbS+m/C1o43qcxDGOIfd7EMp9g +DUeUHGygWHzcZ7O4SuY7SCbqgbsqw6AFX1XU9dZkUOsWpyXYEdUoDWAZzBbcKOoF +dBn54q+jtDovYQFj1piGly271nQwZAUiMMUTegz+5GFx8G51ZbnkME5VOebJlodm +IhYXE6ESm+l0LDXL77l8N1oKOz0mC+Wk5Lka7Uc5KQWnfEAEmKG7vVHEiI9f2fde +ceR1qOEOE1VWHxSHIgwVjwnBwzuwchBufMc8PWLGLUBbGxMLw0lO61+UlPQdV8XK +urS/+N1XTtjKpLKjAtZM03OR+XCjlSsPFDeZGS8ffurVWBgdkjvjnrj+UJGAonCt +si3ZPDQiZcmsgOixMlHvDGUf5JuwIx/VcA89nV2LY92jug8Udr2VJeiWWZbTKgqn +Cw66sJAoPoWZSIuKubmHUBHf5lrnUmUsXfsGFW1dJ2D6kyP51VL+LPLw0b711ugo +Jf+LtzPZIgWV2YbKfE4idxqKr9Zef8dqZ8WcGGpeqJ8y9cTSZidVBwek4GZVosVJ +xBceou7I/BYKrX9GlEijvCnQ+FNQ9+r5XIQHurVvQmjGVe8fKFlRdoHu0egGfhBJ +SjMKDlT9PZZKcOcCAwEAAaOBujCBtzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw +FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJBA +N3IidlwuTo1c3Z4AyrD0/5jSMB8GA1UdIwQYMBaAFCWk+GkBi5nG7MWnlK9qXb5W +19xtMDgGA1UdEQQxMC+CJ2NvbnN1bC1zZXJ2aWNlLmNvbnN1bC5zdmMuY2x1c3Rl +ci5sb2NhbIcEfwAAATANBgkqhkiG9w0BAQ0FAAOCAgEANWefsh7EYyFb1jSqaipw +HWRBtD3eIMa4QgceeIx/+enx2kzwuFcDgAVqpF19811KeCS8MYD/jdgSChFlvO45 +hMLrTEngQwZNS1PNreMYoYXRiIIQ3seoWEG1yQ1KWGzF62FOoZy+rNDjLx1DHO2u +uI5gYh3LmDCYoN7gv3rGq6CfVOwTOE9AcOaW59wj5koJ8XQwXidWV3VTl1xRDquI +RaWzW3GDTkx3hS7gdI3AD7BmLnE7shKLVCNJPjvZwmU2kXb79H/KnVckEB3OrG7M +TTzDdGIxaFTHAb2568cykadvO+MmWdfwwtsHCddI8ak55GrwWW06NWCEQGV0UmHa +MvLC3p2nxT+EWNLbbpSauth0engBElUrQ2tnyOzcx8n2r2X2bEB5xoQU1Nucg+Va +Cm8gZYcXxFRMNlBUUaQIdG5j+nCC52+gH5ASIzr0+s8LUV21cR0+cjcvGIm2aDZ5 +YxNxPNfCk+bSwdnI5S2gg6EVxZLZmOPnh8PbxnmqK9USn8u1hXL74hxi58ULyP5x +VBqlOlwOJ+tv4S2p41HNB8eiyOnbkyutj4AWFhM3Q74uX+FwGJfPtWmXH3eKSxws +2AwSMp0F0CkPTxxnmHScTuPM8P4Iac2ON7mNRTqu2gc05KJyKKN44jQBJwLMksfD +tsmWJNU4l1hKJL6MA61nSKY= +-----END CERTIFICATE----- diff --git a/consul/releases/dev/consul.yaml b/consul/releases/dev/consul.yaml new file mode 100644 index 0000000000000000000000000000000000000000..980bfeb262522d520513d5315f924e319499fb70 --- /dev/null +++ b/consul/releases/dev/consul.yaml @@ -0,0 +1,58 @@ +apiVersion: flux.weave.works/v1beta1 +kind: HelmRelease +metadata: + name: consul + namespace: consul +spec: + releaseName: consul + chart: + repository: https://nynjagroup.jfrog.io/nynjagroup/helm/ + name: consul + version: 1.4.0 + values: + replicaCount: 3 + image: + name: consul + tag: 1.4.0 + pullPolicy: IfNotPresent + + resources: + limits: + cpu: 500m + memory: 512Mi + requests: + cpu: 100m + memory: 256Mi + + consul: + config: + acl_datacenter: consul + acl_default_policy: deny + acl_down_policy: deny + bind_addr: 0.0.0.0 + ca_file: "/etc/tls/ca.pem" + cert_file: "/etc/tls/consul.pem" + client_addr: 0.0.0.0 + datacenter: consul + data_dir: "/consul/data" + disable_host_node_id: true + server_name: consul-service.{{ $.Release.Namespace }}.svc.cluster.local + domain: cluster.local + key_file: "/etc/tls/consul-key.pem" + server: true + ui: true + verify_incoming: true + verify_outgoing: true + verify_server_hostname: false + ports: + https: 8443 + + # gossip_encryption_key: YrcvSl5Wp285kWqKmNzx3w== + gossip_encryption_key: "AgBdUPm4aHUSXQHQoKKB10m0fJHx5+xyOH055Qyx6lDCw6P1PBIvP7eALq5QQW2NvcYGuKKNRW9StZlEZIa5lNgrbQhu99f5rgRIJZipt2HYyVbrJb3/KTvzDlzgvh1AtA0sA5rBoNgHHzuC9qH2f4Bmo4KxiwPGutFxjm2ULlk0TaNJzyq8mc31DhbCLCUkVc7paOxNYOpbfRxu4Q0XCMyR0mTLEGGdXktcVRrfIMWBoDFPpnD+LoSS0J+kJRQYJ8Sp9W4WrZLkU0IF9m9Dilya804mAiIbhBEhWM2pND7wASAbu4An0vxfW6rNDLMzlqLgxLPnKzB6zm2ee7JZamnknK7tbyX4N9WP4fKh4Al/L2XZu0S3kDATZ/jD63nZwsJxMVvJgu/JPI0QhF/tl/GDzLFsjAs45s7+0f4YVZ0atSONaqOB18Vjy9hYzXArMPyHEUB7Tigj57z6n7I8psoQdaYgCu7hS1EYLuOtOUqTovwvtNDjOmFqT0miLFnVhe4gpXDdT/zb15j7H4Fq/rbo5RKWuR/ByCFGz02NKOo+KrPvLAFMsjt8uyEU0ikvPbsgBiVzyAd/CcNDdn93k2wNg0SHglQefLQAM2Q4hRyBjyg5f6g8f8lli7Gk6GUBBycsOiYCT7nma1vT9nzQ2J7O3vlw4ftrPcfiq3alG1AyW/HZ4quHaGc9DknSExK1EiIJzUBA85VfzZ5BKKIKeAvtGLroKG3VaVg=" + + certs: + consul.pem: "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" + + consul-key.pem: "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" + + ca.pem: "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" diff --git a/consul/releases/staging/consul.yaml b/consul/releases/staging/consul.yaml new file mode 100644 index 0000000000000000000000000000000000000000..b5c3f83303f28c3477f676fe0ecc23cf52f4377c --- /dev/null +++ b/consul/releases/staging/consul.yaml @@ -0,0 +1,54 @@ +kind: HelmRelease +metadata: + name: consul + namespace: consul +spec: + chart: + name: consul + values: + replicaCount: 3 + namespace: consul + image: + name: consul + tag: 1.4.0 + pullPolicy: IfNotPresent + + resources: + limits: + cpu: 500m + memory: 512Mi + requests: + cpu: 100m + memory: 256Mi + + + consul: + config: + acl_datacenter: consul + acl_default_policy: deny + acl_down_policy: deny + bind_addr: 0.0.0.0 + ca_file: "/etc/tls/ca.pem" + cert_file: "/etc/tls/consul.pem" + client_addr: 0.0.0.0 + datacenter: consul + data_dir: "/consul/data" + disable_host_node_id: true + server_name: consul-service.{{ $.Release.Namespace }}.svc.cluster.local + domain: cluster.local + key_file: "/etc/tls/consul-key.pem" + server: true + ui: true + verify_incoming: true + verify_outgoing: true + verify_server_hostname: false + ports: + https: 8443 + + # gossip_encryption_key: YrcvSl5Wp285kWqKmNzx3w== + gossip_encryption_key: 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 + + certs: + consul.pem: "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" + consul-key.pem: "AgBg0/+di6+WoJPGpSRIOb2traknUMK3N/axxEhG6IlYnHG4jK++RvMH4LWXPkZrbihNNk39crQGBFjd1+bfCTOz9my1bTGfx93O6Kg//3Zg+4fZ21bSV7ThuVpzO3g05c9fIHBsz0+pegg08wRDlit4HesnpNtETvUGW2+2EDiymk8m7CwZJi1cUQGN/8+WY/7rHqzBT276T25Twu/QX8iLPV16/7kOeMosP12UD8KIhzFqJjYK+M5AbIyko3XCHceTZ5tdHdbaWT4epKNy+bLEyar8qjNZZI7NqkggmzpLL+G0/iq6aOTZJPilRfVqqxvoiapZ81lcnnZn3zOmndYMSVO7vI5DL3Ur44//nyGBCMtmcKsCvHGFy+/A72wBCl6i1z+rT6/LVTxNxclrD3oazMG0jJMUKX63FVPXpKfa71dTkVyHzZN4mz+gq7xErPCdDMxBJCs5hpcALzXGKNNm+qt6dZEiVo0suRD2N9YgVxmu/HXlornmfYqoVKaz8+S3kK4V6e6w1d8ds9iHwNDfwEP/p9wBdLT2ybtpANhXhQMWFS4G5SSMlK/cRCwSeBw/ef4CKGeJy33Oxe4s5avZHB6BDHp2XwooDmWnZKv61s6E4tr+EHtsmVt6B4aO3TD/N2PmhkqoIEMKvUy0iUPyefQucLrnpnYTWRkXG81MWnRHXR/KX5KCp+arRYN9CEMxYAx3Ns1rfNHQbxTqV4PGsZcqY7MNwLJWBJ4pAnM3FuZIj09ZY0AsiRkRnTYMHIqW5NUBKgX1ZHD0fkKFxQyFxnKAIUkyztitOY2kgSAjkf8Oz//AbJtSantCFFaqVDVAL8Hx2A0V5ao7sMZmmIOXkkrWuyJRB7GPDyP2WUiEX65vnN7jQKJuS2vtRN51NqtCGhEzLFJmT2AmyxtDTWimjExfWklLGw6lu4ZPNv1Zpd1/5mzZpHX/MaS8cy5Km0mdl4CXPh5uBGrDaRBCRO5YjpG/21wo3CHI1luPixaH66Jp4sdrZI55Vx0dznIG6z9NjODE8w6zUsmGDMfjqVupTXCNZ+Kk/eHNc2fXsEra7Y/T99695zABopVIzboq72K0FZsiIAZslR1oYewX/5XIz2exUTibnMKIk+9/2++x3x++GdkDt7r3jilROQavPJo8VLZVrzpJjQ4MqYzZ833KEBVChCLMGKsNWZEwvncQU0jYa0dIR6kifvp73ZitirnRjBpdzAU7KjAdJMrT6dH28Pp8TsQComHyj9GoLUTgOdB46cThwnQVMCp4O5H8a8Puo+Fph3TSYFEp+2zE3SBYlmzyr1lGvmJlU+4ZxMm2nvUcDU/CxL+Ce93vAor97dOcwCtBblRetHaturQdpBV99MvC5lyr0DQ+JqNSg34C9gQg8Z1K4XG5hNiIrsf8uxZjepZBjUPFFckxS4whEOWhcbBVLh9/JAdQ+tzoD2YWWx8tDbw7bQ7RNSnibktEk2uDP/NALlFwVY7UxtqVO99MUt9/2Rmq82RrAM6vunkNwuNUG9xGJ4kw1npWUp93f7l8i4JiyzVUFmZw1zJTb9f9LvDu/wHyymwbRIjcn/lWEiQ6jv6d+dsiJrbq4FIFQs/vZuJJXFWXjYL4C7uJT0QUJhjWfgYR5414cNcTwMAgQiHEGPTUjHwqfy9Fl37jSrPRGhGfCJTk/Gtz2sci9PRE7IMXeRF0cMul1NREP5zcVO+wuXb/4G68qDX/ypx4LgzZmKj1HTYdJosDoXc+BijZRNW/70+ukM3JscpQ+5xN4VMgyE+BMJVr2obm01QTLdNmd2PX2CXGGwPK3Y78Rl8qScl55jSAGakqFjkQU/Vy5+8+dD+Trk9aI5h+6BKnkCqxSE9ah4vX94awKoR2esr3+le5WrRJoVq5Qal3i0CthMaUEy17kbc0g8JDOxltZF++GxNlLUrNfJboUSaEVXS+qwQu8y1FNqRhxArgiqxEBhcPy85Kjozh51VvPdtNM1H3IlQ9TD7g9oYs5ozzb6EJv7n/kNcWTjUBIrvuR1VchAtHHTk97l4qpqDoHpj6tY0eclrSRKq6Ddacz8erC3HBjtRkJuBrJSsxl8vnGebX+e9msUdNhEkbi6G2DlT+u17Ee1O7pjZNr1kKoZLRtNqQG1aiDblQihb52iOdjdrhnfwNLQCWZGr80caIX4PsPKMxrWMJO29WC2LBwo04v2sNUg39qUOXm4PeJxghFo1n7L3le83XQMBlR8T0oJ3cMpvmbsmsW4FIWk+8Dmp6X+ltcpanWTsnajygVLEDt5YIqtVf/lwriWdXBvx+5GzWjzPMgpjxf6JV5jWeH9nK5JwyyZpyxppgS0QydD0oMzLR7JMpJS9rsSqJ214zY7ezvfup5pq0rC+51q/U/igLNd5W4RoCpaYa9g3aStWxkItxWxMhBQI29wE4keTPzut1WIuxAML4jbKi27Gf49uQnRgA3D9xw/r1GwUtsvmoPm2Do4gmjwuoY/ohDRk1vVguMm64Q2C8aYfUjWFDX2cfv/Vi4wr4sFTeSPyit2KxuvACwX3YIqAbGzM5BUmKEbOW3iUx12AyLDYwz2fm2TJPSY3QXdinxEeEgDuvpipERPNdHiGwNg3GIdcfmdcKdROMVThMfZMX4+zzFlaULUpXPGf0oQ/+l+aX7iXRA6heEtX+Ktd5zskgcj+mPxgU08Nl4e3TA8R/qr+lBOUHeUNhiSVzmkMJL5CWZ5lwN4ix/G5vYPqebzBDW/Ag57Vh+TGKWLUizxn8AkivtIMMcLuENfWVa1KHYpB0TTpdjvKhDQFg7OlLpkLt844zTl9nrv1UYpdOnOqrC6GsFt9ucG6N0IIjD0tr15XvVAQyzi4SDJvhY+ZlP9U2Xvxah3eQl0Kt6hirIEaSYCNSBwdRQo1Me8S8l5ZPd7/WuB1Lu/p8LSr1776d9l6TRZAUdR9kx+zgutIh0gPrIvod9rLX4NGJZLhiDsVJ1Ao9WSLiORTpWgejjr+9QffU7JRgj+FoaeuJs9u5/CqqDu6ARlAsMdfAfO45OQkRGcrbf666F5e7P82//pdUa+v8mTsgdA9ajoL1VrbFuq3deRf1MAOcfhtzAvAsD5qD8AfeI1cm+syzJfvo993g/+a8eJEJ2MqPW8kY9d7c6Yf8wSeGvGa/iMlzyCDU6HIFA5Tr3T/LtT8l6cIVjMxqoS4A+nkBpFAB6i4hEGsYRlwl+AIQh7j+H5wJqs+spEydwopo+vl5dvwkP+/rv7yHGvfmuKFB+KT3Fnv4nGgxW61NO15oNx+NJsYFzwW6zjCjr3VT2dP45PYLlAfKI5Xxz3iY5vNMtJJDkpu/L/vZV7tgVYegBbeNc6XXffLQP5U5SxPVw6NXAHoWB8qDHwRsBUDURFLjlk1NYUa9e7hC/ZPVNYgBUE32tMEsUCGejhtvhIuiplt3q+EX1z59KEoZRpq0xSO7OaqmiGCi/NoF+iIJ6UQoCYC/fe8CHhgnhgL/gvOO5taLcRnkLe71yPxUfF9lQ8CcdDJv0FRfkjPtPz/tqDUfIgpUAbt36+qYMgo81v9KJeJxekPYyLhzJTTbBMBYQP++S5U/Z0p+DzAVUo+3zKDGilZ2SrMrFnn5/m9k5rdawT85ly+FAaHBLov7FHm5TIvdsqvJ3m2DS3HPH5vdNoACfSCrQgQXmi3XkuOpqSZAATq9pTlYWK3YR9pmpo/zsfHqnvWtQ3MztLv/vkLpcjF74n5NmdZ7cA4TdkhL3LYEV2qt//NWG1DulGcALVOHnUFk9XdbN9O1ik8B8iZ2hgqrLJx+zg6VNLLj1X7VSDXQhmRsIKl1l3jrP/gBmGviE7TRsSztl747jegiDHOXlCuI/gFhs/uhsvjY/gq5VpsNB6Wy0FJfm3aZsPm2n9LvC3WmtzgGGv8Uh+WGsSk5eEQnggynkKwZhkmxPhWq+e1MGWR62liqH8BsieEV+e8OZD8gaO5Ih2qPAuHrG20WPDZq+HKKhehC7zjMyEnVz8/5arFnJD7vO1so1pxg1/YU5ZAXVRL2HemK0U1em77nBmLlGnbFR2S6ltc2Gv3XYiZ0tEKNRrgVOuX8DTYiXz94jnoNbNn8GzBYDtJGEgEpC06GKrr1PuRBxGn5m0XaClcb70tRXZlE3/r2e9bplV4kBFDag1TmmH60gTmJ2vZeRplxnabNImkdBVApzg6+JjgN/nf198L9K3u4Wh7sMCkIIKGjeDPlz5hnSWlEphMjWElOZM8h410j1TwyBNMRFSKdtxvJN4tN3xM5T3YlG8S9/eznAayc41Mwu8Oa1HQzQ3+BPzLhyYajha90XjlvLZuzkCp52qfD9rcGAuW2Q9zeDQMSahIRtdhph31qjTavcTvwFgeHeN+n95ndCWJXqWrpBMRLDNkVfk2NoEPyQiP9Wz2NJ1JTK8qtytSzW/8u4M1oHZkuwsU7QHOpMkZgedAkwGYxV2funaW1d6hRD/YCUfnMNxmXnz0acDZIgZWgSvzMa+nHqbzocX+PGBragErXICLesR702TjYrCyxkThAiLH9Ivmhrm9LUZe3hc+H5TCLA1i3E3NnVoyt8kq8FQelARaRDrdeqoAu2hgxcVeVDtQ76LqnbGDTCMz1WHh/eNufq07QF3xtCxWAtISwIZ6++iG2Xujn5Asx5qX0WMniGtavuCRPmRVR2PA+5zgij3XxcppsxZh4qEBoKeOPJ+97qRpQhY9uI97pFdl+brlHV6dX7e0oW+y/rx6rn4y1e3M/NUYeWVr2cgFZZSzsObIGqsqjtI6DPvuBd7oPDjt9CIH69slVm19oCwbM4Uj/LtUeNRa2zXViLux6xnqMhfpC5tFVgR2eeoczsPa8HeNUwRzoJb+eqJSuMOB+39qS5gdUed2mypkDV1s2UjjDr42fcSiXlIW3T43wS82vvDibz4HEhsblcKp70t1L/zpwfcrGh+VrSOnKfyMJ8HZTPLAdfovo3/JbZpc8EMTkfn+3BBzQBm+R3C/gdfkyUV0uic12vxGne/HLs3E9Ys0qGdWDdEZt/5M=" + ca.pem: "AgAjOpUx9DFh4kMuEQKoOHSEUnlhOTI/xxcJbv1pXvWRkXIoNTAxn+dLY8t21ic4zxRx5p0Ern5V6ANPMULQGzViZ1+j3+I58EXDS06ZxMWj8zg3TVQQu8sJBrL1JssXbfOFeHKn6dXHpujXR+EJ4lh5rqxitoBN66szaj8ZD0hVzJGin3NiiQDr65xsXFfZtxNvqmI5ncoQPNdJyO1H4KDKNMCxaBqwYgxgeSHgRJofBMJf8NasOovs7n5mbBbhdENmczgI8W7RxcJF7tLwNeJaMDS6djky3wRDsAMOBypRLdd67GLUQau3mDDI5Tek+kNKh7vY4fubVHIIHrb+dzK0x5007dYDp1HUPTUWnG81vAE8lDAR35+dTfpoCJegs90cpi06XCeCprV9H06I55AscbEfESwX8Hm+7AKGcRHieN99EAgp3ErfF5DE4DaSR0VeljKvA7K6s2keIpRTbjxFtl2xtWLw6AKnL9v5F7KaLGWUnqZzHrWW3Uqkqn2hCtLGPol3lVRt8F8GxBGa2GaqMOzL9ewneXsAnrreG6wl9YSmQPJnK3BvKVs8t7IE//Jxs75hKB/5oAhB046NAUWxSxzQoJzPI83WE+09xh5lG001VjkMm7ayJzuUAc3ubfB5dv9n3LMhjda1Xex0HRH54r1MhPjWAZ8lOQiB+8GmDPVZ9eBisuBhuPjw+39s80hEPjLHElAKZSVfnfVwR6dFnV6tMwrFysQWC9Ded62/wivzxoxUmQW0hwvMhR8ay7N09RQxNmAI/IHT1gJrPl3WivQ/S8FE5Li26b5U0qFuHab23W3sPP/ik8BDe9KbtP+JlvsG9HRgR/9d92ZJt9QCpNPESj6aiKeDQyR/LfcnrXp7P2L3E7AtLfw6BYyZh9uJ3AAXMDL3buGTt6BYVl9vMgKOViv2REpzaqK2BYcEwOammjdcf+qtyhvPX56wMjxTgV3HnGxFu7wzK5tM+FED45Kv+R5pBmXjMALrDcRm2aInyr1rHg8ihn7A4S0Ccf93baIZISeLaOdawQH+pF7avIItGE7L2iPvfVZkusPiOnAutn405c4DzA0GaUoYLQMYv7io48uN+RG33AzlubRvYWvOtS9Lc6S+JJn7Fh/jizsRp2b2ZvDvJ3jZl9HjJVe+DpKp9V7qlWv4LcdfpZ3ElzXtl4SYUzQ+9+/7KURULNqTQy49045vAepoI/j1Yg1NHXjwQVlbVHNda78UCzTYdwTX9Gr7uSz0fnNmoCpDxbcYODVe3bsyM8eh5A4z8DX031D6DyVutCAlcxvd8/tAnfi4bEYas1G/RQ9TIzwJiROxbV/EQMOcADiM96+7J2WEQLfa11yqpXkUMY9cU/JtDNFMqlooEp4yt33xFgSINERbsgI0/z6nuJ7OVRPxudYlAiDXVfAMqSU4zOnLcT58RhRhaR+ZObRz1kj1Ymtd5H4PZivwK4Xn3r/heZxXiv5tKAwm/hz38zoiRKR1i7+20qED2Abh0dWsAX37x1rT5N87bS8QgeMMDk738h8wc1hD1o2uxoAcsfMFDZm5v057CUkv+1OGupnVwbmB3O1SmBQ1WWTki9YEF+QMB7fmt+cv9A9ooKjvE3vlo73bUzdk47vFW+dOYipwHxODiXay9iI+PuFBj6RI4f6IfTD53fBsXzKA831JQvXGJr0zUrlTKZEVtt3Lvt3DamtwIFrDbiESdB9B6o8REHt94XGQBIQMmODpCQBIF0rCxXJ1P+7Q09ajcMJ1DhQpU6+H0OSwOU+caaUQ2uT8ggn28TLKM85JDK3bWHFgmk0eADR8fL3kPA2o3auI6kd9rYNbyEKOLbE6yv/34d8HTANYv3K0QoKmGsB1nbvNK2xDIPNCx2u6K8IAAG+RnlXYIqNQtZAG6vwuB7x2OfAuNmvQDqVImnV5mJmTn1ag2qD8bBOhH3GAZdIdprfP+Lou530Fr1FG/0guXg5WaEefOI+tXNBxwi1hWFCay3xAfYAJiyHxPCJNwN5NiKd3WZRIeC6DBuSC9Qz0QdwtTAXSQ2iQHzo7fmlvuvsp9/CEE1N+knbmQq1maFng3WJqmWXB6kwfywYyozQx7Wg3PbTnhNDlAakqo8Fcs7Z7AEgy4CLpsDP3pceQVj2oHPjbaGtahN5OJUH+M3jEQT/+rWOO9ciDsSgZIykzjUov9AYDgsObDGT7V/lPsif1wib90GMAi6eBjNIn/xWD4FiapafPGAWCDZEFG4VKb9K3c3ebotk/mh3XhyJh71DR0nvxE4bhBKjPqnH95HbR+ZqF7Cdh4Djo1X+IQGfdkXl/C9AzvAn3dhsbQl0YrXREqxZqfie8bCPKQ7fXvGbgBA4Zc2jp6ZXte1MliQPDE5R+ER6Y8tLoDxtXUCVhbmq4sCohX5ErIJu4cyhBvEzS8lI9DdAWZt5QGFnByn6YOEy6ESgu0VsYhhW44hspQLxVer0KSey/DGVcRtBLgolexz4ASo5Ds16ZcqBGtCyZTIABNLN0GJTlYJjcRQTvDnwj+yH9QxZPmjsJNa13es+qhnhumLhBBHXznLD5beofOlBoFnYikD0f11ypJMU4iSla4OkRapy082tI7iDLnUgt+syP2a4Q6gxSbKs3OH6YXVbcrgjzJMYNXbO7zR47RAbKzSlklsuIqrNVbrNNrEMjzJGBMXGdzsFX6gB7D0Lr+JwTWA1AjvtLWun/t6ejmMZaE7da9F49NN30mmUwcIQbUroQ/pFa5fAi9SbUgstgkkGjpBa4XjbGluFuJUYIzZv9aZbgc8mf0BYzShe5sVWqEwsSvmZne5Y9zyCyDGfGiYE/w6v/67SO4QhK65EG6dKnC/jwOzW3B+Us6Aad7hcFNTgo9fDBSBRuuRCGXyN3hWmqxPdJE4JAgkYAKb2vZFp5AfoxnZxdORAxoxRVUZmhPyYTObmExb822iyD6akTHu8+HUjXkSYo0+JsKTFyjviBHgIzpWoaTPZ3ihDpro9XvJ4FEZhsFYWdK1x2CYq+/8lmnRq3SHyjRc6NHhYInnCjv+W+P83dvyfFAj+0V+jLXkpTezU6Lh2e9bbb0KOhC3zNA7W885Yj0vqzC4xar8h7oNji8PGdIUmDtVZcxb8kwIRy1OiyYJFfrDN7NU9ULsKOuH1qbAlN" diff --git a/consul/templates/_helpers.tpl b/consul/templates/_helpers.tpl new file mode 100644 index 0000000000000000000000000000000000000000..61af0722c837ceaad3a5fee896031e57daab3905 --- /dev/null +++ b/consul/templates/_helpers.tpl @@ -0,0 +1,32 @@ +{{/* vim: set filetype=mustache: */}} +{{/* +Expand the name of the chart. +*/}} +{{- define "consul.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} +{{- end -}} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "consul.fullname" -}} +{{- if .Values.fullnameOverride -}} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}} +{{- else -}} +{{- $name := default .Chart.Name .Values.nameOverride -}} +{{- if contains $name .Release.Name -}} +{{- .Release.Name | trunc 63 | trimSuffix "-" -}} +{{- else -}} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} +{{- end -}} +{{- end -}} +{{- end -}} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "consul.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}} +{{- end -}} diff --git a/consul/templates/configmap.yaml b/consul/templates/configmap.yaml new file mode 100644 index 0000000000000000000000000000000000000000..7e71225a8fdb1d3f24474672fb682a2df4c73fcb --- /dev/null +++ b/consul/templates/configmap.yaml @@ -0,0 +1,9 @@ +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: consul + release: "{{ .Release.Name }}" +data: + consul-server.json: |- + {{ tpl ( .Values.consul.config | toJson ) $ | indent 2 }} diff --git a/consul/templates/sealedsecrets.yaml b/consul/templates/sealedsecrets.yaml new file mode 100644 index 0000000000000000000000000000000000000000..52c4be54e7187eafe2e94b7656e3bbafedc96abb --- /dev/null +++ b/consul/templates/sealedsecrets.yaml @@ -0,0 +1,10 @@ +--- +apiVersion: bitnami.com/v1alpha1 +kind: SealedSecret +metadata: + name: consul + release: "{{ .Release.Name }}" +spec: + encryptedData: + gossip-encryption-key: {{ .Values.consul.gossip_encryption_key }} +{{ toYaml .Values.consul.certs | indent 4 }} diff --git a/consul/templates/service.yaml b/consul/templates/service.yaml new file mode 100644 index 0000000000000000000000000000000000000000..75ad77cc2b6d61e6f2c62899f11c390a2f991a74 --- /dev/null +++ b/consul/templates/service.yaml @@ -0,0 +1,44 @@ +apiVersion: v1 +kind: Service +metadata: + name: consul-service + labels: + name: consul + release: "{{ .Release.Name }}" +spec: + clusterIP: None + ports: + - name: http + port: 8500 + targetPort: 8500 + - name: https + port: 8443 + targetPort: 8443 + - name: rpc + port: 8400 + targetPort: 8400 + - name: serflan-tcp + protocol: "TCP" + port: 8301 + targetPort: 8301 + - name: serflan-udp + protocol: "UDP" + port: 8301 + targetPort: 8301 + - name: serfwan-tcp + protocol: "TCP" + port: 8302 + targetPort: 8302 + - name: serfwan-udp + protocol: "UDP" + port: 8302 + targetPort: 8302 + - name: server + port: 8300 + targetPort: 8300 + - name: consuldns + port: 8600 + targetPort: 8600 + selector: + app: consul + release: "{{ .Release.Name }}" diff --git a/consul/templates/statefulset.yaml b/consul/templates/statefulset.yaml new file mode 100644 index 0000000000000000000000000000000000000000..d2535bae69f878375c17c8cf934815ebfe55df40 --- /dev/null +++ b/consul/templates/statefulset.yaml @@ -0,0 +1,107 @@ +apiVersion: apps/v1beta1 +kind: StatefulSet +metadata: + name: consul + release: "{{ .Release.Name }}" +spec: + serviceName: consul-service + replicas: {{ .Values.replicaCount }} + template: + metadata: + labels: + app: consul + release: "{{ .Release.Name }}" + spec: + affinity: + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: app + operator: In + values: + - consul + topologyKey: kubernetes.io/hostname + terminationGracePeriodSeconds: 10 + securityContext: + fsGroup: 1000 + containers: + - name: consul + image: "{{ .Values.image.name }}:{{ .Values.image.tag }}" + env: + - name: POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: GOSSIP_ENCRYPTION_KEY + valueFrom: + secretKeyRef: + name: consul + key: gossip-encryption-key + + - name: CONSUL_LOCAL_CONFIG + valueFrom: + configMapKeyRef: + name: consul + key: consul-server.json + + resources: +{{ if .Values.resources -}} +{{ toYaml .Values.resources | indent 12 }} +{{- end }} + args: + - "agent" + - "-advertise=$(POD_IP)" + - "-bootstrap-expect={{ .Values.replicaCount }}" + # - "-config-file=/consul/config/consul-server.json" + - "-encrypt=$(GOSSIP_ENCRYPTION_KEY)" + - "-retry-join=consul-service.consul.svc.cluster.local" + volumeMounts: + - name: data + mountPath: /consul/data + - name: tls + mountPath: /etc/tls + lifecycle: + preStop: + exec: + command: + - /bin/sh + - -c + - consul leave + ports: + - containerPort: 8500 + name: ui-port + - containerPort: 8400 + name: alt-port + - containerPort: 53 + name: udp-port + - containerPort: 8443 + name: https-port + - containerPort: 8080 + name: http-port + - containerPort: 8301 + name: serflan + - containerPort: 8302 + name: serfwan + - containerPort: 8600 + name: consuldns + - containerPort: 8300 + name: server + + volumes: + - name: config + configMap: + name: consul + - name: tls + secret: + secretName: consul + + volumeClaimTemplates: + - metadata: + name: data + spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 10Gi diff --git a/consul/values.yaml b/consul/values.yaml new file mode 100644 index 0000000000000000000000000000000000000000..abfa3c9fe91a68d4c1f9298539385c6b7f13e5c9 --- /dev/null +++ b/consul/values.yaml @@ -0,0 +1,45 @@ +replicaCount: 3 +namespace: consul +image: + name: consul + tag: 1.4.0 + pullPolicy: IfNotPresent + +resources: + limits: + cpu: 500m + memory: 512Mi + requests: + cpu: 100m + memory: 256Mi + + +consul: + config: + acl_datacenter: consul + acl_default_policy: deny + acl_down_policy: deny + bind_addr: 0.0.0.0 + ca_file: "/etc/tls/ca.pem" + cert_file: "/etc/tls/consul.pem" + client_addr: 0.0.0.0 + datacenter: consul + data_dir: "/consul/data" + disable_host_node_id: true + server_name: consul-service.{{ $.Release.Namespace }}.svc.cluster.local + domain: cluster.local + key_file: "/etc/tls/consul-key.pem" + server: true + ui: true + verify_incoming: true + verify_outgoing: true + verify_server_hostname: false + ports: + https: 8443 + # gossip_encryption_key: YrcvSl5Wp285kWqKmNzx3w== + gossip_encryption_key: "" + + certs: + consul.pem: "" + consul-key.pem: "" + ca.pem: "" diff --git a/vault/Chart.yaml b/vault/Chart.yaml new file mode 100644 index 0000000000000000000000000000000000000000..88d52d68dce5f6fa24ea72fbd4905908c782ada1 --- /dev/null +++ b/vault/Chart.yaml @@ -0,0 +1,5 @@ +apiVersion: v1 +appVersion: "1.0" +description: Hashicorp Vault cluster . +name: vault +version: 1.0.2 diff --git a/vault/NOTES.txt b/vault/NOTES.txt new file mode 100644 index 0000000000000000000000000000000000000000..e69de29bb2d1d6434b8b29ae775ad8c2e48c5391 diff --git a/vault/certs/ca.pem b/vault/certs/ca.pem new file mode 100644 index 0000000000000000000000000000000000000000..f813ad79ecbc15b3c24c4c9610e7c30f20492d35 --- /dev/null +++ b/vault/certs/ca.pem @@ -0,0 +1,30 @@ +-----BEGIN CERTIFICATE----- +MIIFHjCCAwagAwIBAgIUX0BP3+wcb+y53zvCUe5sVlXXGAQwDQYJKoZIhvcNAQEN +BQAwFTETMBEGA1UEChMKS3ViZXJuZXRlczAeFw0xOTAyMDQwNjU5MDBaFw0yNDAy +MDMwNjU5MDBaMBUxEzARBgNVBAoTCkt1YmVybmV0ZXMwggIiMA0GCSqGSIb3DQEB +AQUAA4ICDwAwggIKAoICAQDtNXoyR1bM0WyBqNjHolYuLNf7nmpBYyQwzlllPR03 +7b07LdMLgVg6CRFVA04cTfC4z1D3Tk8RhYNp1PuTNxzZ/FsEATaF5zWpgaDA5pfd +nTEnUa8EpV8Lh5aeSQLdoML2cNQ2laf0PMAn+tD2wteoNVjUE23rtk5r2+YLkf/I +w62ThUSnf3xVLZ5LX846rUbG5qVsO3p1xABsbBd2YALKgoriCPfkZHlA9KLkug2T +EWh9eKSkw/cs/+uQWrcCxFO8hFR3hrJEuBy1DPmxPMDyW6jp9YR3OZJCV6PiTRxP +9ET9aGyCJbZgapn2SWggIXDX1Xs768Eb7mW6d0CjMtfV1tu+Y7BfmBVNx282g05k +2zEohPIQIOoGEzIv7CX09QN/kNWohkvjkI7xOgIkPxqcdo++UOezs1Lv8ccaJnTy +YOhq2zb1+kbvkrhms1iepOgf1/sDhuuO/GJ++jbTefUd10T89xm7IwChJFBIn5BF +56vVSAEYg2OP4/bIFvF5c4PXu56uemLhaQdxLQQlf9n+Fq+05CVSeLR1YOvM6vOl +c26iwnLfeqP+fldbxKSuYBDBYjgpw9qOnQmffHSmmAy54xdmn5yIzHfKFgKrOOXl +TDrR19iIY66/lCmPOHAQra/Zyhu4gENV7SlPt1owCZHZh0N7tMjtf47FLU7R9RuW +eQIDAQABo2YwZDAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIBAjAd +BgNVHQ4EFgQUJaT4aQGLmcbsxaeUr2pdvlbX3G0wHwYDVR0jBBgwFoAUJaT4aQGL +mcbsxaeUr2pdvlbX3G0wDQYJKoZIhvcNAQENBQADggIBAABdc0x1wzeeDMNiFC6E +tuVa+l3dsqkKBFPdLDDj3CC1zoRTiRrK7v2ZSHRwB3x+0pfaAODjFzk9knyxvuRo +aINbSrw29Vh4fxk5nYWoo8Nxe93ooe2ydeNFeG+UQpfIEjnQU7aliVZ08vsyGr8q +A4TgdyfFgpUBO7GlWVnntTyBtIVIpd4pGIKgFDKsWxCuuZL5Re0YMhmFaobf08yB +o7poxRuP5UPrXLv8mVUZ+GS/wV+93SOiZyhrGLHRbyaCape5nArzWvscxuJshHja +wMl85HRyhg4a5AQTs7p8lgRzeF76FU2YpQVUZQ2FlrYZV0eUQgQyPFkCl7ulKZSK +JuJMYqhAGGDg5G6Ntk7/u3SnkBFqo5lkOSGyZ4vBpi9YZGiIyF2F39jHwPuAhtGt ++mIiW/AOv6AhD9DWIlu47K9vb3D6JAUplUu/bcH3Jk69B5+0JlPXhHbhZw6mHGqk +9MKmJ44dtSziHRiDXjjKyiXpJO9VOlTt81Kp2u52jBUnG2ZmdLIysbKc7F3gNTA9 +QASOv8XmWhdl33yqXGRDTmAv3wH2DYE+gaPhj9+z693/CGjZIfWizSDTVPP7vUDG +7stAk2hG4ygJLvqMLbuGx528w4qFPlz1eGWYAni5YY2eDU6R5UjLRburRZ0oy/Vf +1+f9J333pqL0oY32zY1QOo34 +-----END CERTIFICATE----- diff --git a/vault/certs/vault-key.pem b/vault/certs/vault-key.pem new file mode 100644 index 0000000000000000000000000000000000000000..5d0a8e69f1abd0a1cb6095a19efb9251fc1285f6 --- /dev/null +++ b/vault/certs/vault-key.pem @@ -0,0 +1,51 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIJKgIBAAKCAgEA3pB2BZwZl1bCLztkOjfP50tE7b6quE0bn47gfYElqKpx89pj +Y9tmIJMYv1BUwpJU+vZwnVuByi/ZI9OBVltKn7Je/SHn33BnCdYQqoeuxUHDMcWN +tW5x8LRTqzgzokLjTuygeURx9JnpMuMymyXr89nEx8Pxf2PVRM2XnX0CXydx9Bh2 +cvPncPGgZk+A5mhwy831k1xoAYoOjM52HgDypCxXh9mRRGpFANgwfhVFRmjEBTKr +hOJxXCIVLvdw8607poScz/VUGCjdZ1SPY/nHp8SDu12ucoOV5eXvoY6p0k/EL0C9 +KxwnPGAJ9ROFXHUd0EJEiAVVXrf+Oeuf2pC0FEE5i/Z+tlBxN4f5Cz0c4N0FbFbo +riZMOJzJMULw7pMQcd0DnjGTDwFuOvvKA/ohU8aDhAcVbLy9Zy+rCsG/JfBW3dJV +lCvOdTAKEkSTeM0ZQD3aDK+JkiAHrt1wKm6ICOf//4PPePLQHcISU31JS2tiTUKM +mAHAc1IwgKNGSRP+tVZDwptCbSkW9UEuhl7DtZIhSBAyoNOGRWH977bOFvP9TfVU +kwMvL2JxuT2rER2yYvuWhsmcc7ZvPYsiUSJKFtiSJAmffoNQG+UHzzvgxSEeH1+d +qF+OjTcngPUYqASOIhB82U9ds9v8EBbex9M0/6zlYzbA6mdgAPUZUamJQIcCAwEA +AQKCAgEAw2qmJgDMu4PS1nPYagGtS1FcgT8jWNVjRrLFy4zEyxZ1HX6IPBpczoc5 +eGmJMpoXgY82jAPXrvZaOsmvy2o22IdePfYySI7B+fH6CjE+NDass5vY9A+4fXdn +63NaasM+IINF15RQVkt5ZVP1kCI4zZBM5nXWKls228WEtSQZHAFfXcrI3d/oO9P8 +WTi/Xg8f0uLRGAVP0OIuKlXxgiCk659/b2mJ0j9YvQgVc+8rN0ovqry1uuS0Ugge +/3EFvP9C28+efD3VC6190Qd/K3IaauTyIWZ9EFEXIZfF0t2XoHCnOjImpp5+mNVe +iNAODYNLnRtCXwgH0DXPQ33uipL5eRgM89vtmGUQjgoqHGK54XYNmdvZXHQiwEcS +m+sDy2kQx9+Sckg4EpvWro2E91N1xR2c6BR65MefPNhLsFQCf5eA0IdCN7kg2PKI +Fm+Ac0DYxf9F7skxrQSfJol713NYJcqFU3JTmf8KUihG9Exbn/NwREFJEy+DEWqt +BBEYMrJHMprtm5/OBxRWKTIKnXWLm5dKsLhShyZi/JYyBPTA9xnD9HRUQHgW7ky7 +BFu2bxGWEL6egzUIgro4V/ZimJZtwN7AJSrbujYxjIiwSp9R11r6DLCk+LhsE4/A +33dlW0OZFsLX5kBYqqNv5rvgsBLncD6eKuqw3D366t+aBSDIbmkCggEBAOj8nd3Q +//Z5zSP90C1Ug1saPsnnwxn18vuyM/xzduu0fhZg1neK816UMfhVLUwv8k5sVLUw +dRFOfAU2YYwHO7gIbtP7O2fc52beDp2GVDgOCqGaEitMqAuVNhWX5NPaOKQTSsga +mDVLI9JoQUZ7YZjobEvm+SLQ18Z244Dxx9B9wGsucQ/ReQnDTd2fVkcXudj3ooIX +v/LgcTZOGujgyn6mpngZ+bFUXScLkrY2oM+UDpS/rs5xkI06BNGPiyXuDI+EBKQU +5pfXT/bCihsMtFsTZU5QwHEyULxzTB8uTqJr8pnQCrG2I51tVQ+uvncpdirUAd/G +WXI4XgMh4qo2lS0CggEBAPSMTELftP783pGpVXmlcOQzytsGx8esLoym/VtrM/cU +6KyqoOu+9xkgoLWajVoHP6tlAogZaewzEzmvqctCHsB+IARuYUZGQnKGqgO5zJ5H +i52BOsQoLEOYZJ/iMpNfDPCvqdt64ZwDhdvRSiTCml/XeHQBTgYW0e8gz3aicx0+ +fvO9YnY56blKmRyVUO7ibXw2VI8wfSOjTU2UdPNXk+vfkixplqmKLf/5cCZcE+lS +Aq6n5C1sRw57vUwbYl35gFeZL2B7x0l7RFVR69HByD6vFiWP3SwKPntnqJbGEyQE +ZPKqeJU7tcrLz/8ZBv/AX4q28RLgdxRTwsUZsyZuJQMCggEBAOhGmTiAWf8nNU5R +h475t69Gvhxas5aZLjKiWdOwZXndyuqShp5NaA39nsfeWzeegWqP8+9jrQKhBWHI +8n1A5Ne3iI5L5NDKWeSjM1z2g9YSoaS0zrJeTRanHnFuqlJPN7LUDPTsFpzjGYZ2 +K8WR0h44cWdGkVCVdtlEw9FUuolwJTp15YAIrSv/iwyNAt4DmGPnlhsuhE4mVpf2 +TDupiBe2GzaXZujUm74GerCwS6hHCjZf1223qI4zroQiIG6jIeCelGXk9HOi0/TF +xBvtkY1PC+uE9CamK/mE1PotF3Y0Onv//floBZ+4VVo6M2bnbgiKroei3p/R9GAZ +EznxCs0CggEBAMXvTMaP9RqyJ5+0dHeafe5nMVjoewlVhvPXMZguBAiIBu/Cx68o +iS3wZ8O1zZVB6rnabxsjnsVMbdIyKXdYFDXvoBCWGuvbcGrsLm4Hk+PEuu+IKr2c +Wn93uHJkjlUUCRBCznPUWQmDHHRYSO/KB1NtvpP+fl2VWOR5JRK71/qim/TCpBBX +PaL5C0bEYJaJ9N4lx3mCYLdYtPgHIkXX6+Vttw11hTnCmwrlpW2W95LRC1S8lYZi +bnz9kLEqNQslKEk+tsccSKhkOmHohbvoYiDCbGWItRaxT/Noal9nARUU7XQwoJsB +kloLb1XltvGIjoxjGGsT/a4ZQbtw2r1PR2sCggEAOP0hx7sm+c/KXoKMAa2pxGuW +xJ8pYsDyTEK+WffIxYoYqi3LGvLJJnqdbr5iT3v3GKtRYfVhwwaS4eA7lRIBuMl5 +Nuk00j7/FEy0opc6mH29O7Y1M4ETCdPdZWVWKfMiBxQmk/+x/f5cVPoNLnwmyaH5 +8kPVR2iHjsgh+EcwcewdDeo9Q96/3ACoimBDkF7ghk84b/75+ns6XUa1GGSNP699 +osdzom4IJg4T3ynk4pNS5qTyrlQ+x+y3sXtcTT2jRTZb/uQblXJ9g5HnlABYg5kr +jSa14hqbl9fn7UoHqxwVRwd8HbDFqYAJMOSYYgiBP2d1Kx7rnffcgEtARUZ95w== +-----END RSA PRIVATE KEY----- diff --git a/vault/certs/vault.pem b/vault/certs/vault.pem new file mode 100644 index 0000000000000000000000000000000000000000..60c927c19c3849d6673113eaa757ac2479a639e8 --- /dev/null +++ b/vault/certs/vault.pem @@ -0,0 +1,33 @@ +-----BEGIN CERTIFICATE----- +MIIFrDCCA5SgAwIBAgIUIregEJ3hK+ahVJta1UC8mB9bbQYwDQYJKoZIhvcNAQEN +BQAwFTETMBEGA1UEChMKS3ViZXJuZXRlczAeFw0xOTAyMDQwNzA0MDBaFw0yOTAy +MDEwNzA0MDBaMFAxDjAMBgNVBAoTBU55bmphMQ4wDAYDVQQLEwVWYXVsdDEuMCwG +A1UEAxMldmF1bHQtc2VydmljZS52YXVsdC5zdmMuY2x1c3Rlci5sb2NhbDCCAiIw +DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAN6QdgWcGZdWwi87ZDo3z+dLRO2+ +qrhNG5+O4H2BJaiqcfPaY2PbZiCTGL9QVMKSVPr2cJ1bgcov2SPTgVZbSp+yXv0h +599wZwnWEKqHrsVBwzHFjbVucfC0U6s4M6JC407soHlEcfSZ6TLjMpsl6/PZxMfD +8X9j1UTNl519Al8ncfQYdnLz53DxoGZPgOZocMvN9ZNcaAGKDozOdh4A8qQsV4fZ +kURqRQDYMH4VRUZoxAUyq4TicVwiFS73cPOtO6aEnM/1VBgo3WdUj2P5x6fEg7td +rnKDleXl76GOqdJPxC9AvSscJzxgCfUThVx1HdBCRIgFVV63/jnrn9qQtBRBOYv2 +frZQcTeH+Qs9HODdBWxW6K4mTDicyTFC8O6TEHHdA54xkw8Bbjr7ygP6IVPGg4QH +FWy8vWcvqwrBvyXwVt3SVZQrznUwChJEk3jNGUA92gyviZIgB67dcCpuiAjn//+D +z3jy0B3CElN9SUtrYk1CjJgBwHNSMICjRkkT/rVWQ8KbQm0pFvVBLoZew7WSIUgQ +MqDThkVh/e+2zhbz/U31VJMDLy9icbk9qxEdsmL7lobJnHO2bz2LIlEiShbYkiQJ +n36DUBvlB8874MUhHh9fnahfjo03J4D1GKgEjiIQfNlPXbPb/BAW3sfTNP+s5WM2 +wOpnYAD1GVGpiUCHAgMBAAGjgbgwgbUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW +MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR8 +MSKFtomM6z2KHW+4ujAmxo7xujAfBgNVHSMEGDAWgBQlpPhpAYuZxuzFp5Sval2+ +VtfcbTA2BgNVHREELzAtgiV2YXVsdC1zZXJ2aWNlLnZhdWx0LnN2Yy5jbHVzdGVy +LmxvY2FshwR/AAABMA0GCSqGSIb3DQEBDQUAA4ICAQDTotzox/AOcyz5t0+XdfKg +gqGDoi6NSwvetuX4983QimjjGwAFLPETOjEbdVv201U5Gmk3Ka5pxKsNI+/AU2Db +WqZhud1qKZQbqLhUhAfQgk+USebX/Dc4IXXsjCQcU1iFGwn5nsx/cZ2yurevaHW7 +8tJcil7Gl5P2ElIF5Ltiyvcli/j/zERi+n3SMSIEa3Mfg2Pm8Dqy9Lj8GoL6Y5ew +7pPtBPe4zIkT18/IpWvMLJsV+hom4AKTSmd9CMIOvT1YvESGriPwUZjAD33xzLl/ +uw/J4DwvfF+LE/b+KSeTTCNgcMFCS7kBjStYGmdRV9PW/j88iKTzOiLC2MNcGnpr +b77/mCUPbs4/GA6yIS02uB9inbUAJQWVc/SgN3DQIO0M29OglzB5pEtLdLiob3Dc +LGT/EVbyO6jTJNWHyNaoI+Vf3kPtYDVJeGoRjWbRql74U+csCe5CwORHs4j3ro8Q +GnzVzl6xnoAxibABuL2ZJewMRiOkj5DqNfDWFRe+cxA5V3xUVBtZegdFuKmHhRw0 +FboTEjM0XHzesYwCi5hiLqb4QE98GhOnFJLCxCospJRnNaGXsu752rZ4PmGWAQLt +uNfS2VEAQYf19PoGF/qKSMfXrZsCUNPzIcvv41MVXEebiQi4TY+DOnqMdb2RdvUd +LbqQ1Bqupak+LcKNMbtosw== +-----END CERTIFICATE----- diff --git a/vault/config/vault-server.json b/vault/config/vault-server.json new file mode 100644 index 0000000000000000000000000000000000000000..2007b021ed3bd23bf4ab5f64d54b5ed2b4ee9cd9 --- /dev/null +++ b/vault/config/vault-server.json @@ -0,0 +1,23 @@ +{ + "disable_mlock": true, + "ui": true, + "listener": { + "tcp": { + "address": "0.0.0.0:8200", + "tls_disable": false, + "tls_prefer_server_cipher_suites": true, + "tls_cipher_suites": "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA", + "tls_cert_file": "/etc/tls/vault.pem", + "tls_key_file": "/etc/tls/vault-key.pem", + "tls_min_version": "tls12" + } + }, + "storage": { + "consul": { + "address": "consul-service.consul.svc.cluster.local:8500", + "path": "vault/", + "token": "" + } + }, + "api_addr": "https://vault-service.vault.svc.cluster.local:8200" +} diff --git a/vault/releases/dev/vault.yaml b/vault/releases/dev/vault.yaml new file mode 100644 index 0000000000000000000000000000000000000000..fb21bb227e10533d13b810c172c561f7fffcab11 --- /dev/null +++ b/vault/releases/dev/vault.yaml @@ -0,0 +1,76 @@ +apiVersion: flux.weave.works/v1beta1 +kind: HelmRelease +metadata: + name: vault + namespace: vault +spec: + chart: + repository: https://nynjagroup.jfrog.io/nynjagroup/helm/ + name: vault + version: 1.0.2 + values: + name: vault + replicaCount: 2 + + image: + name: vault + tag: 1.0.2 + pullPolicy: IfNotPresent + + resources: + limits: + cpu: 100m + memory: 128Mi + requests: + cpu: 100m + memory: 128Mi + + ## Extra Deployment labels + labels: {} + + podAnnotations: {} + + service: + name: vault + type: ClusterIP + # type: LoadBalancer + externalPort: 8200 + ports: + - name: https + port: 8200 + protocol: "TCP" + - name: backend + port: 8201 + protocol: "TCP" + # clusterIP: None + annotations: {} + + vault: + + extraArgs: {} + + ports: + - name: https + port: 8200 + protocol: "TCP" + - name: backend + port: 8201 + protocol: "TCP" + + config: "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" + + certs: + ca.pem: "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" + + vault-key.pem: "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" + + vault.pem: "AgBwLPELD/6w99AJaHZhRuG0RxrVgQGmM9viHGOvijcRDpSldWtvmsHEGxhLkghPSGW+D0LPpjyNsUATnW1buVMmR0SbXbQ9mqv0s4Ln/hZn4/FnDcFb/+NTAxD7kkNh/bbEwwJaA0BBCjuK+GSqkZRh5ilFnfHCh4l9sVgRUw2Q0KY/jbBv5OMqB4erfqn2yyaWb2AOpYUOj7nLteRKXyKprfr3auxV8GdmCKhKbKsXlyrql90ytSj7VhpOC5n0igQnk2gzxDeiUOvxaXPh943BoyhVdnPoFnoKg6sdJubsyi2buL9Th/M6xvvXIW4PY873fEazdBGkFsZ8nDYRw8SDsj8E4bHoYzzW/ZanSDzvwPCJ/yAm3sF6ZTVedtSsy4os+FdeBvJpgUC10MepicDXWQ3M3PoW4WQscz9jTkZftTHxtqhw/YqaGSilPxg6iTeJZyHMR7//mnPMhcaUSrb8eeo8M6BzyPneFVKkL65ZQFcekp5+HgydZBfRn63ng2yC4S3Kf/pUEmF54UrjA8hCzGIhFDocbsfZr8gm6JS5kL+cBxxNWlmkY/RX6773dFBum+WdvlyQREj3yKlsAR5PfoaMdxaYAa0w+IBagAWKQM2Pf/ZTAkofEKy/CTa0UKbmu0a7NQm00WduZuKSh9idb3sg0WX7UudtIRcNyUN7LxXhrkpHsFiOS0sPIZcdRnoGfB02Q5KCDQxK3hmvFv7eGFW9OEAqfeNkGI08tF6V2Zvik0CK29ZF79uA6nYqXRpajhxVl6zOxf0Kj61G5PXOZyInFe3tGXSUTJzmtBtPC5wHa7u5acGrzu/K3qOuWHUf7zkxiXju0krgaapXRYsuU9Iu1OZpxQnGUe1pIjlYx2NcKXtvApdSMob00mN2n4aLcyyVW0bgMvri2P0FQx5A6mLL2uoeUgOS1FAM4DkXAMlR+nevYNdTQKGbntTtlq4nzK9mvAnOw0M9gEPTv6IuAnUaDkXTUbePZX/UNKFAvVyXdOM7rl7ohGn0QO1U9DMfSwdLlUZD2bhvIcR7uOHTqGeJzHCTgtTtsk2FIXPZ2MKbLjgAlPRXKGERsRowzJSTLIvSTCyYycJbDDspGoINLhE3BQuYDgfFqD7nz5UuUfI00yH4UTp4xvDn0NJfG/T6Y4zwtoW7oyX2ZfE2LLsS7doJR3OLoC0HC+UEL8K9w8IcH7ygQI5Vf9i0mNWvEgQO4AhKR1PYnJGmxQ/TY8kIKxlrhvKxsUIkzIWdx1Z6OveTT/GQX0StrPbKB5diLnQoGkHm9nmWuu+0r1NohwxzBus462FPS4tZbxTLrm+3xHICgmTJ7J7sHESGZqmEbzw4d+o76J/bVuuvR3mxVo5MySaLSBzPzee4ortXUC/GX0/HyEqG3W6rF0vDafV9cvBJbfQEP/DS+v64YYJIXK1yCk0Kw5NwU8esuRz0OsW4PFrp3jaC4YVcWTJlqFkz3rVRJ7s1vnpd5/oaO0LLU/kICGWL65yteiNHfuoImoiB3a51tXRiPQbThQetb6rCCqHskThxQUXKi3UFqWAO7WdByxAUBZ3Cdjoecx+9OfF/jK6dzlzy5ICvfpyOBtC3HlgZd4BfdpIQClHVo+0HN70HmupFGQfcg975c3i8k4qS1nuKPpg9Wa6WKGb5hi+04OXWNr12skigOXI7UI4Z7UuRHUCD9SK+VuLmnTkp1S7d6xd3nXTaSz6AtKo8WsRiEqzQRPn/IyxGekJfaZwtpmKfldq0OxnoPK2t5p/dss3QOer2NRyWSOMZdhA4o850su7bBkcBOlk2TWH4Qq6GyMOTQH+kcGy2GYufUAnAld9pXEVvYQ+m6/PSU5M4JVJH8s/YemK0Tg1Npy4vxRZDPI/Ni603tIWSwrVB7tUHkcMXviWv+ybbGmum32Y9IIzB061URG/26Mm+6j5NJoZf/6r+CqmmBC/fsfW3rRBasHD/gYuZOZo1Y8cHFITg5O5i2wFNPAEHnsLCT/usY1jSID+IzfLJDTp0BtwNUABa4Kjz9FnSaIvql0CY1FHG3xlpadq0yYEnQz1asG8sNBYqw3Q5A0Y4uf/p8Fmlals4KZzg+9A6vjedOrLdsJhRzLDAGnzxXdI4iL719NsLU6JwCkWzFdDaygWYtDbXTGCzxK8METNA9ADDuBnm6bFIM5+qBjQg0B6Z2S0jxAMqpLzzwNdlmahQZ18TQkEnIG6Xucmvvq6gzw5KH12fm9GAX7gA+nstn86KYOMHXWM53TYO1sB7NoWH8o0+zXqSSK12iF+5obgElzZg/jCaRyNnueSjO7PMPPqpc0ywTOjHhJ/ticIs4+3rqVm8hTEDCITvbC2XHVp6DzPb3LNCW8Eq+vGeF/z/mSo6kZHkqnUxefAITotDEKNWYJBXD5zHsLCe3jBRvS7AJ0LXfxOOW9PmvSRuqhenOjG1s+ofIEyCaK+1CGwqrM/t2jiL1WcJTKhMA7oDWI87ieAdHENC2jUx98tgi2yLLHRl6a1P5V6qthBsQYhAbsJv3BppwlGr8B0FcDHNs5T3a1s4IfDCtyaFjL0O5bCzrjeq4YZXQt7Ej61Uz4vwwDOeZilP4BPp0+a2I9AjYYVcZtTFCFhMnBZGF6kfcSQog1ME1f9Eenys1sFu02itJa/txgXpmoFTzGK/KkxbLRQVZjwe+w9lTsGcOzDUf+BS7Nz+F8xuzFWjlJZOhby4g1aTMAoJ1hooqEFEQ23doMYD7bkf3XcAumLid8cGC6BrWwwNS/Vzh0xM7FC8Xy+1m0MzH7Gw3fw4GVkjyb9oY7k+/G8SmsVq2QF8dCXNnEvJVF585nPuU1wN5DeLWCjVMaRNt1QYKdkwCtdfRSQYKTM0tP/N4YxAJrPuVp9marjG90xVL5ke732/Y0O7ndJUCm1gmHXtsVyXDDTdQNqb18C+YaO9KY9nDkvRjX3S4G769RS2Ecl1RnlMvGls29x7HIEYe1Q9vngvgGkh28Ox0mr4/UlasVyKq23QsgJi/rGbCUKE+rGCwwpKGhiObL49P4AbKmjx7F11PMajv/WKkWWETWV0EJcLPHjfe6WxkhieounSNH1asPfxJ009cCAEZKX/+24voHc4qJhNTOAEELB0/fgebku6pIJNcOrx0LLCkPDhlDGWqtu0LcJy77C9YlgVv1eRgrjUV93QTmbusbKWo2qxAKqkEYpAAyhjc3MbXTgX9nqYuiOeaxBvoligeaJ8Qf8U7gMzStMoZnwNFYSyxKvSvZrt6FwAKSsmkGZKtA2HpjeiKxKOiymtWFsvGcdo87jG8Vcju/PlYS2GvPnZJyYBG6VcfqG1NkG6YePdAPD0Qt3IPyR6CCaAbINx2p7Y/IaTjRLzdWDYyAKQQEPEL1lehO4w8h+T3QxHRYE/Rwv1olrSKs9l3iJh" + + livenessProbe: + enabled: true + + readinessProbe: + readyIfSealed: false + readyIfStandby: true + readyIfUninitialized: true + enabled: false diff --git a/vault/releases/staging/vault.yaml b/vault/releases/staging/vault.yaml new file mode 100644 index 0000000000000000000000000000000000000000..47cefaa92d609c34abfb09932505f3e2b423809a --- /dev/null +++ b/vault/releases/staging/vault.yaml @@ -0,0 +1,72 @@ +kind: HelmRelease +metadata: + name: vault + namespace: vault +spec: + chart: + name: vault + values: + replicaCount: 2 + + image: + name: vault + tag: 1.0.2 + pullPolicy: IfNotPresent + + resources: + limits: + cpu: 100m + memory: 128Mi + requests: + cpu: 100m + memory: 128Mi + + ## Extra Deployment labels + labels: {} + + podAnnotations: {} + + service: + name: vault + type: ClusterIP + # type: LoadBalancer + externalPort: 8200 + ports: + - name: https + port: 8200 + protocol: "TCP" + - name: backend + port: 8201 + protocol: "TCP" + # clusterIP: None + annotations: {} + + vault: + + extraArgs: {} + + ports: + - name: https + port: 8200 + protocol: "TCP" + - name: backend + port: 8201 + protocol: "TCP" + + config: "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" + + certs: + ca.pem: "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" + + vault-key.pem: "AgBB9WRzzRpyHcJsjjFHJqHXzN+RQfhBZamSpS1IfiOW2XvCmreiCj+bJsp1tJ1gPI44ib8meI8lk75FO8K1bo8dtoW3S6UigSsfdFNcHa3gBN7WjPDqW3v+L6LpxH7Hf3JnR+mC/991WoF6M4H8Dw3NHYxe78gqqx9inuae9a/xqjimMnFGRZC0fsZOXxIJK3AAMWRNEEUpTECv6kuhRynY2LAggKINuhs02wQGIKnkHuCjJdXyAqb0vHkFHsBMp6ASlQ+FFoAjBsBbRDn/fQr899gePys6ncK2cPI+3Xo7DBpCpI6SKsDcsgmE+KJ88lrKwbBRQEJCG5WTba/6Az9zCYn1WexyNMFDLIdsxlew97PxWXcZohktdiujLxrsV8O0eGVc2n7B1ct6JhPsBwBc+5nuVnpIDpzeJZq1sqZ9Rh+OyxLlaVS9UkwS1tKtGPBwhhwdyIjULVlmF0NoDxisrYhGqpbzHVZr3tXgNO5J3nomdqj0itNA6yqdmIkhzG4vmolM1mRNb8Ciy4uy1kmXdxMJd0LdT6Z4wKeyxDM/kWNF/vyoa7oOfUx6b3gWk/FaRe1k0UhNbuNSOe1OYXkX40chqw7S6Nm8GAgv0RLlozxjeNFHeV1VjoVOa4pGSYY1A/Ddt6+M2tXkvadrq+3yypb8ffglVmOshsIa6sjeImH+6sgkC/OqaPiDHV4UbTqrvstSH3QpmFuJd6NaRXGY2W+JR6V6bTy6XuRVxSG0yYssggkhQfSS4jppNRp2kGD/pKn8IW/kgseLEJJSaN/VW/XHbaCRJMRJu6WPi+oE8nY8VFJVdkx4BgG2WqCfrSGvhPfrG0PxoVIIJRnVIRp9iFZHFiURlU78GVNsGxpHqzV5+b6h9w4ByMqunBRb8AljACyts/VovkXwE+sWlqi+fVcz6Jqrr3W373Em/9L4okZxtZDmRySRRmEqMUU9r5WYjqrAQZa1rfOYXiVrjs1mY1H6eK1bYABrvxuv2YSGLjnoLu1NVs5GZ5nwxkCxmNQmVYH8jVbDH7GVRccS2mDCgcxwNUAUmjrlqSKJr/bDRRK/rJoYDDcymVcfN1yyNX/ccW4Z+nzJVQWGrl55a3mWynDUMmOZBmAPColt2KpHUXXcuhjR95SOjNecDaoxONBrCNOqs33wX3uQqrxWjn9A7VamaX+nxmMNZ3zkE4e8i2XSyZq7U7ml/VNE82TUflZKiOIaiN2APo6HRxIwMQyIFOpxqCXeqgV/7VkF4ziE93BWeGVH9+jUBRT1PuXVnbC+wO+FV5suDPLuKfYOSJ8yQrZ/np0HLwOXujCruZHI/irAaoQLK2Ftxy+f+lOCwZWWE80JTYcMT1fVujH7YZPTX1zUqyaxNg3mgywYwzVOTCxUxLtUirmOe9RQkhFnEI0KAtG5oKSMPSft752RXj1L2l3bdTknu8S874l0vWABp9rhiYk9Kdwt8pD5iNkUGPzOdWh2gC7BFyZQZNh/Bl/55Bso4a6W68KXF5dr2lfhBxlmgyhQIIrrAyvPretlYlq0qRze8+bAVoEc3sCy7I69C8MRDn3miTByGDzjvD9BlbxVgJ1V2ImwJlr8T9hiSIHXVxOknpX6haZWmHWzQtCZlK1Ys7iZH4knP9z42my2AKabX8Q7HtF/PhiC0eziKh1ZyFnuJzrlz5eDu+MCQ2XcfXFKwjU4N2ySgjVpScumLB8keeB4p71FMS25ptGAkqdnv+Dai2eUNNLu/mONlwX16jc+vFug3yRRGPf916ozZbkY/JTAg/eY6mBW018ddD8EY+pHZLiV1gnCmneu7Iv3Uf77hIPxcs9L73sCVtZsUuRm90QQlLIHtZ0LLJujaP0hW3sozgZ5ZbeNqBitP0GVerVHudgk+F2MjuDJbGZVaejr6NmU5ljtiV44Baa1nmJ35cVQL+azuSiy+NuCZ9USobnKf8I0htk3yoQeSsI/mEFAc0GLD8Pg4O1AXbFz/gfJNbsE2MMOU9S3sZOWEzhcXhztgWBSqnFX0Kz/4167oyJR/1TbhiZNyS7dvkBBWoJaLMLDuV/YiC1ywPJkmHDopHQ8FxTw2hrFVz+rvWX9nI9IFnN3+IuxSkZVKU3j7+tzJ2AyM9p10b+/Wg7O/l94YhLNpJJl3raefRZ7lnaDHfZU5W5JiW40zT3M/7rVNxeQbCtBWCGYAZLSgLJP+Bou1Ntqg26sNCdWknLnP9eBwUjmy66NdcGkqlPrkISLhnwwcuNEDvHLZ4TvNmydP+1aTfiSZqhEJp8mHqBaDyoAYyDCgWa9woS7ETK7YXRrGVMKKhCFvXvXU8kE8UBFv1kSaZISWy3mpibZPTp0iQ1P601jxaZ+gseNufBRAwn5D5P1DmE5itFMCewjQ/duPu6bdVsKgtSnwKRY1AIIBixGqlwdVxSwz7PZojGtVcXcJZxtalJmiwYhLo8Wxr6QyAur+VetNviocYUc4TkRB58qCR7dLPUP9Fb5GoSk9EOxWXS/mZZ+XmDToJMwkGZOboLLvb9ooDhX5omtXW9zw2tP2KxmngWt5y0s4W5AhKZtq8fwqiYAGgOF9b4zIcn+L1gHqdKr2e62w9d9htz9NE14clENg6SPyTGIN8H9k5nI+NUXjGDClVHRjHuy7+ddHyDpXuAFpLBRckxkQVkzL4nS2ioDL5VSZsqIaME6tv4ZSHRfweXhuPJ8FKr3CgCTvnHJ9GIETL4SXNzdnvGfrp4ALp+/Ijx3hd8VApe/8jplcxqNUriAuNLEfAuz8EqCBBeldq/NNdoOSpfpodJ029diw14cumzk0Uwh6at3VEbR66gGUeye4AMLqQVkj47Vl1D/R/VyS6rJmM1tiVhaDL/p/RkxPwwkmbQH6o7AsaS11i4DxuZn64IUB3byjDJ55vDCQysl8B2fyAHu0s6171he1OodsnLhR2+6cckvoGoJP5umKfEUOrh8Ehz8kzFYUIcdwMTQ5L7pNqbDEY+Bcr3Yx4YYU/XjtwAGLWUEJYtv/zlGMwrqUEHm//iQS2ZJR/7NS0jL4FsLGCbkfzIbVU5yk/H03du/sZnws4mP64HHpd6qw7i7Z95YHGO/SjeQGn+WhS/YK6Tw4FW8oVq2+4MpjZW6Ok14gyCxfRnbkztMTToEy9t7xKaUVkdOoE1wYVQcZI+MYwL7koB2Br/rsLY9/h83IOlaUjLjhkq4s+DUwRKlPtBup4ksQhsSdI8qwZiDE19ikbqthfk+5CBiJzQrZ6BE3I80mmxk3QA+DI42aJoEBta0u9EbeMOR+mNwBStmovc1CdGMfQpyb9JQiIRgnaLl13XDPxFrYelr9uzKb67YKRaaaRhIXnUjtMyVKpE8NZE5E+bKiT+Rlh3wtPNtUS1+SzHnNxh/zjAPPwsZjX+PLIWnmZOvhQ7sUI998uWqAi6EB9UhMOSK4DIRedS7pv9GrAnFNZmtQ9jyMWuMX1JALaH3tK4Wi/TCcZgz9hAe8/KOK30EtpPnkEGiEC2NOcluGdL8bcB//QneesdTZGV0UhxelHN+BJJYY/LpI2l/eAsRT37w/YJge44OAb2xNsisPsLFUd3yWnd5yzmZvrl10QIlmRHYgLbzYGL3tpr1XG0gVvKWCnCgz0ZBLIYIvlXcX7TxCGlgmBFwHfrcPvz4LHRhjnCb44KSyWZiKnPRpSuV/PVXOhMThLPnAlkKbuZD2SaZJCR6J5mdAIT1MSNcLLvm8sb3mrFRGN0jZRUBbmCzT9mjqzSxieKXwxzeyQz4wZOHD4+tgQn41CR8/LsAXAceKF8lWuSE0LYM6A5R5CcGcRE6XTFqJGTbYyvCNA9Basi5Qxfvi00rdi9uesViBbM36uOw30Nc3KwkshojnXVcjb/W34oNBWkyRthuRitHeLPbr8hiEHLf9g9DbfEF0SLvM/crxZvirNYZUQbJmVcZpAkAk/6m6X7lvdLY5PihqoWMe5VR7d8emnmFqz5Bev+a08McbRsXbsMEMKhVh+0HaUnRI+lZEYYBfi3SIVtSeaRE8qa62XbEMNm3iLNfjMy96lgVq94QMALbUNP4QRoDejyD9ndOxmatAYvXCfYsgSjG/Qk079Kv8qKDSgxveNTR83JcMgzP8oW4++tvhmZPtY74U3jy97FZqfJmG75HulCadQGjQBjGSqJ1y2KFqOV9nzIMF+yBuv4dMfcdZSoN0pG2SS9C3EqRR/NSgmG4LEKNAa026ctgkjweEifJMqfga9yDKX97exrkeG7ALZrK71ZdxhFcISGTWnnzdFjcBA6D3bbi3o8lVYe5b0V7T6bS8AxOB7D0HBxqnBLo6W9DrzPIbm0stJy6qmrM3C1yoRgTrdB49avYMbtb93oMcyxVDe1FmVQQvULAVmt24CYdHAP8SmQJ8q1QexdH2SGKSt7IgF0fVGO3VQmLE4XhUZ/Lb7tCmWIe8GTUAdx8j4TVK9tXzXn3LzNuWXBLjeLG5IilCmRjpfnNhhXKrxOehd0znZo8vkzeGNZKOQq0w3VkD/MvtU83WvSxdjVggrzhKEjpwrQh7IBGR3XXIuJolBKuB4MuCtI5IvHtyYuRr9TKiJSNGKlDoh9rx8yH5jJWQeyD41n/mHnPKqhcpVwINefYbaFfKwtoG+S7VNizNmkdudqkqR1ihTDY0CH5clDNNBCzAZbtKOrgEkWgQQX5onyTKI75bx7f4SSWRnMkeoRjMblFNbKneSZ5xyBsHZRpq3Ju7KCjq/bVYxx1XVf9Xtpk9Bu7vFU+PKElgre3TvbVEgeWDE4uspCT+NMADpoCbSh6aBVunFi+KPkQJ9+iKnkxLmOCe6yrIjzSuMDzJn/68W7JgYqnkOGIuv+j3GiRVIUewUYdRQ+y0HCodP0w119L0xqKpWAxNqv6AETbMsCgBTHHtYiLUNA8RLEBU2+l9jw8QJJrQrinNODvahs/DhO1ZQvHvA+6YDrI7O940MI28kREviOmua7ttuqYVW/+jBs8ggoywa57EXCPRgBD/4Jwn3QCz6OLqfpZ3YEn3cdwiQnNtC0gLxn2LZCo" + + vault.pem: "AgCNYywbgkltjBzLlwSJHDIBQqdr89tuatiqUcpFm17VBrRwgpKXIXPHoJmpz82N8BixYY0rx1cmFFpy2Au3IEj1DbCvQ6he8W6n4YTUcwVjtfxN3dvS+0DNsTaOEXKwzg0jhlQNZcAFVm64WyLpnPMudiXew63rA3VVFXFxdj9z5nVwo7eH7bzMghHYmQP2thKJxHemPU8b/xhkrUBFoRuO/Rk9FCipcyXsZ7WegIMNElEho9POGm7sMtHf6T+HGlssc6iEH8ogV0UnmReBte8QDEZb7Q5hSIV6wbhe7PHy8pUU5PyWmXz+jwPyvqsdpTVupJToMe2B5NLhR4kgoIIKyX+dAWasJfHGinr8YjARcym1jb1X/D0mLsThjGqg/kvBXzpoRQTHPhINaOtgAC+0moDoYd4TPC/W0XC8cz/TBmZLsVqyo+k06TKTb5bjI+D1suCIgr4RkTnoj4FJFKUNfiju1DGzpBsDkeGQuBrqinMhusizGVf7Y0VzBMJLHoTYZqgIlkx3NdUkkBdWK6YJz9wwyyUXkyE6+45LhydHUw5Zg3P6o+ZTND95jktVzMJeJ8MGlVL7d/1dEaP2rzaat7MfifYm0JPGLBZOm1zZlLA18rp8RWrF/Ibu85+4mnJ4dC4DsWCmVQOE7SKCGNSF+a97KgAhw6a2gyOUV3pXbe4HlypcLrT9W0DRI7J9tt3WdGt1lunFak0AInYFFkgIWLGbbNa73u6cwgxlv4/m3LRiQTqz2HNa22JfrpFgl9B4kIqchFVnWyFaRvmfiQGC+prXkc2QkQ7os7JN+BjYE18HdIZKvQVdDBFwK8/K+KIWSCwD4Zsp0YzfW7oh5lgNq+Bq80V6FHqdH50yjTWuBLnKayRf1RZ1MXWg/PBnV0pDzljqOmn+QLsi7L46nl3RjTkGUzdpPZyc0ip0WZn41aHODMxPdwz4XpIjFoFhhnwITOZfQvyfJ3qqIRzUqsTSSWUMl6BJpoqEnawhuiXPMk9txChPXQwzcCx1T20F4ci7TW8Kvk3nhwSlY4kvFcaRcXVJVWAVliRjmFBbM6OUo5ei2ZQiebO2oZtYqCUVN0saBLK62slnCNhJx5Qsq3a8tUlBQWodlfRPsaIxoiCzTBUCws8Zrn2WpLHd6y08DtTWyjXBo3EdNpLrVP2MwFKJ0BU0l22bD7EHRB32Oe7Wq9APBD35SGrTig38AVuY6NRAq1XfRn2WxuYUapkAgVfRGvnGVcox9NZZoh7ynrPju8XyERUCD61obVRMxUkTif4gqlEmhRCwxLopmG7VoFOcfWraoyOPLg0LSpxKaUyzqGIlG4DQXnJYW/Ty6VqPE7AlIWjN1V01NIUGj8NosnzGG9ykTyFQw9fhcx9c/c2LuQtzt6aeCvX/58rBGFlUKHG1mYeMAJfIiV/lV14FGKK2JaqHTOg727jXxEIrHlPMJtgcPr23rZf44cp6qqYrWrLmMas70xQD8Py+KUCIMUJ7WUHA+GnRdIq9LCY0ayY0NZVWvrhcD42f6qTJ0hxC0OYJU/v8fBH+Uo44O0hRb8IlTFWsf9qvvRhsjlhYsgoAdveyj8PewoppJVPF4qgJ/SDafGmTdUnJpooS3pg1EAsrYreOpq4KYP81t/sn1JTv7oYxrMIK5ggUKcqWGd1rrOPoJ9sJFRQwt7dzzGblgJ8cT1PzK3iIU3p/ZVl9l9b7dLrLEbXyaAwUCR4FVxskCaDEeoItM7+Ok8nI+th8JcEhq3w1HcQCyqJbQN0/Zua6KfDsEnmaqE+Wti9YLWejdxM6+jeAxxDj99wLA5d8rB2PN8sSekqNwaWQ7vJxC9treGQ3lT3UKPfyeJ13365N8UqBLR1Us9DxagMhLu1nQGI/unt/JMgPz0766TbJq/kHlzn1JWd1HKbDBxh8+qZ8pH2xZ3XiXAa/gOMlldyTdvUBSobsh8U9Z/UgPbRZVzdswjdP8ZWuPtfHS4GyB62fqzvyZzOMpOBFkDJW9q0sIR0W1+9ffalomcdAHT2fn0AS21Gchb85MNr6SElkgzIch7Zg42B8e4opigDZXgQ71OW+TSJ0/ymLq5o1B+0DqibEev9OLtgEqbaKfuoRR+CJufYpKs+/DpD9BO2QwNAXfnFW2GoILm3Hmuq9H9PIJB2yz1ho5qzCFE2MKKYgOb6GHQKxTsL9W9OfXcnjK/Hmm7P6HE/o5zHq6xSTjqmoO3jnPaqcLTJ2y+hJp9235IzmDsIDE/qAZLSkui0ug8+G7hQHZfZ4RlFUfHENgRksakZExdKxgaIuNtQX12hQgrkWlbdsrg7AERj9BtBpe2rm66I7D5PEc2Z5T5ZgYrWn17TGemhQSEnxfzKXDxUR/oBYGEX/+v6OM0MSR10bIfSMJhvT+f/P/BusyiQuyP2Y/3HqmJk812HC2Rf3/TBh4642HRkQPRjUnfmgaesl7d4Romf+XhYh/8jkHZc+Mg8oW3CnPL2ttoeUwq00K01TOuJNMQDefLS0QHlUV4LPGkXzPg7C/J9MEWuDzZ+Zp6u+EyXh7jXhN9NNE6UAWT+QSti6wkJM/RRXxOeIO1UlyuKKqTmFcBwQnKv3Ooknjd/y7i/HFBKWGNKOD7WEscSKdsWDNMzsIM9Dt1RrYufJ6+PYqcGK3VYl9pu2KKaVZMTOE4GzgU9lNHDyOPZfuwUgpTtkCQ6vzcZetncVXB8Hm97+f5EPBIx46ySVh8rFdY672+6EDEm1jpkmPo/ZpLQVIK+5REsmRPmLAViBghqHmNWJh5MzgyvFZqub8RVTCZsuJOOZJqMU2Za2/q9ZaJXHI4A5Rj2XjV/9AlwbSVbz++LGsVPxqocFE1s5XeE5/sGDG5+CrxH5fnNsPOy9xTNfqVWmtqJd5jzTR+MdLeyQcgI0qRArMX1tfwNWfE3cekcfPFAzwkbWWpzXP5p368l9IxScyFbyos+G9YNfoHIlOkz1IFa1DpbUuVVMMW870aHdvDVDjXMRbQ6DM0ZlysgJGyM5SI7oThHn8UbzpyfHqnC8x/Ugd3AVFjVIfa59IRvpO6mNa4zfFkBJSOvTZ/3AU5YWo3Zg2UhNF1Y0ppnrL8VBC2aoMs2O7fnp4zPcLYViZHDiUqSs3QANcWauYpwgkLUzt1H4lnSCTd5sDn/0nClXYN06xG9HJBfvLaTwSMW3oLqZ19DdRGuNuMX+lrqleiiTfJARLH/bD5fMJBu6Iz7ekXI9gExMJ5XjlwVAxqQLtsHsLA0fs0XUPQO431I3ocf22XjQErXwmG6wltZIDKa7kYlQszzfSgdK1QIeLn1h2y2iUy83wR/6xVszIgKoKS81bNiIScK2GWchEEnAfRN5acJUJkSqY5dKbNBN+j9e29y7I61YiyoCvMTMvuDYuocS84hIQg5v0YO0x7u02TpA" + + livenessProbe: + enabled: true + + readinessProbe: + readyIfSealed: false + readyIfStandby: true + readyIfUninitialized: true + enabled: false diff --git a/vault/requirements.yml b/vault/requirements.yml new file mode 100644 index 0000000000000000000000000000000000000000..bd78919334e7935bfedae80677315b9a2e7015f6 --- /dev/null +++ b/vault/requirements.yml @@ -0,0 +1,3 @@ +dependencies: + - name: consul + version: 1.4.0 diff --git a/vault/templates/_helpers.tpl b/vault/templates/_helpers.tpl new file mode 100644 index 0000000000000000000000000000000000000000..0462cfe2b58e565f490bc5819854be8bed1b9cc7 --- /dev/null +++ b/vault/templates/_helpers.tpl @@ -0,0 +1,36 @@ +{{/* vim: set filetype=mustache: */}} +{{/* +Expand the name of the chart. +*/}} +{{- define "vault.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} +{{- end -}} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "vault.fullname" -}} +{{- if .Values.fullnameOverride -}} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}} +{{- else -}} +{{- $name := default .Chart.Name .Values.nameOverride -}} +{{- if contains $name .Release.Name -}} +{{- .Release.Name | trunc 63 | trimSuffix "-" -}} +{{- else -}} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} +{{- end -}} +{{- end -}} +{{- end -}} + +{{- define "vault.http_port" -}} +{{ range $item := .Values.vault.ports }}{{ if eq $item.name "https" }}{{ $item.port }}{{ end }}{{ end }} +{{- end -}} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "vault.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}} +{{- end -}} diff --git a/vault/templates/sealedsecrets.yaml b/vault/templates/sealedsecrets.yaml new file mode 100644 index 0000000000000000000000000000000000000000..0583d007b3c043fea03d8d639f35ab7de030cbd2 --- /dev/null +++ b/vault/templates/sealedsecrets.yaml @@ -0,0 +1,10 @@ +--- +apiVersion: bitnami.com/v1alpha1 +kind: SealedSecret +metadata: + name: vault + release: "{{ .Release.Name }}" +spec: + encryptedData: + vault-server.json: {{ .Values.vault.config }} +{{ toYaml .Values.vault.certs | indent 4 }} diff --git a/vault/templates/service.yaml b/vault/templates/service.yaml new file mode 100644 index 0000000000000000000000000000000000000000..50c91705603f299b4ec7bb30b5ff9ff67744b530 --- /dev/null +++ b/vault/templates/service.yaml @@ -0,0 +1,14 @@ +apiVersion: v1 +kind: Service +metadata: + name: vault-service + labels: + name: vault +spec: + clusterIP: {{ .Values.service.clusterIP }} + ports: +{{ toYaml .Values.vault.ports | indent 2 }} + selector: + app: vault + release: "{{ .Release.Name }}" + type: {{ .Values.service.type }} diff --git a/vault/templates/statefulset.yaml b/vault/templates/statefulset.yaml new file mode 100644 index 0000000000000000000000000000000000000000..e8063ad9efe8210fe285470abfe916bbd773eaee --- /dev/null +++ b/vault/templates/statefulset.yaml @@ -0,0 +1,97 @@ +apiVersion: apps/v1beta1 +kind: StatefulSet +metadata: + name: vault +spec: + serviceName: vault + replicas: {{ .Values.replicaCount }} + template: + metadata: + labels: + app: vault + release: "{{ .Release.Name }}" +{{- if .Values.labels }} +{{ toYaml .Values.labels | indent 8 }} +{{- end }} + spec: + affinity: + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: app + operator: In + values: + - vault + topologyKey: kubernetes.io/hostname + containers: + - name: vault + image: {{ .Values.image.name }}:{{ .Values.image.tag }} + imagePullPolicy: {{ .Values.image.pullPolicy }} + {{ if .Values.vault.ports -}} + ports: + {{- range $item:= .Values.vault.ports }} + - containerPort: {{ $item.port }} + name: {{ $item.name }} + protocol: {{ $item.protocol }} + {{- end }} +{{- end }} + resources: +{{ if .Values.resources -}} +{{ toYaml .Values.resources | indent 12 }} +{{- end }} + command: ["vault", "server"] + args: + - -config=/vault/config/vault-server.json +{{ if .Values.vault.extraArgs -}} +{{ toYaml .Values.vault.extraArgs | indent 12 }} +{{- end }} + {{- if .Values.vault.livenessProbe.enabled }} + livenessProbe: + # Alive if it is listening for clustering traffic + tcpSocket: + port: {{ template "vault.http_port" . }} + {{- end}} + {{- if .Values.vault.readinessProbe.enabled }} + readinessProbe: + # Ready depends on preference + httpGet: + path: /v1/sys/health? + {{- if .Values.vault.readinessProbe.readyIfSealed -}}sealedcode=204&{{- end }} + {{- if .Values.vault.readinessProbe.readyIfStandby -}}standbycode=204&{{- end }} + {{- if .Values.vault.readinessProbe.readyIfUninitialized -}}uninitcode=204&{{- end }} + port: {{ template "vault.http_port" . }} + scheme: {{ if .Values.vault.config.listener.tcp.tls_disable -}}HTTP{{- else -}}HTTPS{{- end }} + {{- end }} + env: + - name: POD_IP + valueFrom: + fieldRef: + fieldPath: status.podIP + - name: VAULT_ADDR + value: https://127.0.0.1:8200 + - name: VAULT_CLUSTER_ADDR + values: https://$(POD_IP):8201 + - name: VAULT_CACERT + value: /etc/tls/ca.pem + - name: VAULT_CLIENT_CERT + value: /etc/tls/vault.pem + - name: VAULT_CLIENT_KEY + value: /etc/tls/vault-key.pem + + securityContext: + capabilities: + add: + - IPC_LOCK + volumeMounts: + - name: vault-config + mountPath: /vault/config + - name: tls + mountPath: /etc/tls + volumes: + - name: vault-config + secret: + secretName: vault + - name: tls + secret: + secretName: vault diff --git a/vault/values.yaml b/vault/values.yaml new file mode 100644 index 0000000000000000000000000000000000000000..fe99e142cbe3d6f894585048b548b668d818331d --- /dev/null +++ b/vault/values.yaml @@ -0,0 +1,65 @@ +name: vault +replicaCount: 2 + +image: + name: vault + tag: 1.0.2 + pullPolicy: IfNotPresent + +resources: + limits: + cpu: 100m + memory: 128Mi + requests: + cpu: 100m + memory: 128Mi + +## Extra Deployment labels +labels: {} + +podAnnotations: {} + +service: + name: vault + type: ClusterIP + # type: LoadBalancer + externalPort: 8200 + ports: + - name: https + port: 8200 + protocol: "TCP" + - name: backend + port: 8201 + protocol: "TCP" + # clusterIP: None + annotations: {} + +consul: + namespace: consul + +vault: + certs: + ca.pem: "" + vault-key.pem: "" + vault.pem: "" + + extraArgs: {} + + ports: + - name: https + port: 8200 + protocol: "TCP" + - name: backend + port: 8201 + protocol: "TCP" + + config: "" + + livenessProbe: + enabled: true + + readinessProbe: + readyIfSealed: false + readyIfStandby: true + readyIfUninitialized: true + enabled: false