64 lines
1.7 KiB
YAML
64 lines
1.7 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: vault-agent-injector-dev
|
|
namespace: argocd
|
|
annotations:
|
|
argocd.argoproj.io/sync-wave: "2"
|
|
argocd.argoproj.io/sync-options: Prune=confirm,Delete=confirm
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
project: cluster-addons-dev
|
|
source:
|
|
repoURL: https://helm.releases.hashicorp.com
|
|
chart: vault
|
|
targetRevision: 0.32.0
|
|
helm:
|
|
values: |
|
|
global:
|
|
externalVaultAddr: http://vault.vault.svc.cluster.local:8200
|
|
tlsDisable: true
|
|
server:
|
|
enabled: false
|
|
injector:
|
|
enabled: true
|
|
authPath: auth/kubernetes
|
|
image:
|
|
repository: hashicorp/vault-k8s
|
|
tag: "1.7.2@sha256:ae3d307658b72a1cf35dab9bdf92c995d45cdc7183af0516857714b5bd0ba84d"
|
|
webhook:
|
|
failurePolicy: Fail
|
|
namespaceSelector:
|
|
matchLabels:
|
|
vault-injection: enabled
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
agentImage:
|
|
repository: hashicorp/vault
|
|
tag: "1.18.5@sha256:750bb37c1638fa194ab37053a81618c61bb0491ddec6fccac87c07a8e6cd8166"
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: vault
|
|
syncPolicy:
|
|
automated:
|
|
enabled: true
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- PruneLast=true
|
|
- FailOnSharedResource=true
|
|
retry:
|
|
limit: 5
|
|
refresh: true
|
|
backoff:
|
|
duration: 5s
|
|
factor: 2
|
|
maxDuration: 3m
|
|
revisionHistoryLimit: 5
|