60 lines
1.4 KiB
YAML
60 lines
1.4 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: vault-agent-injector-dev
|
|
namespace: argocd
|
|
annotations:
|
|
argocd.argoproj.io/sync-wave: "10"
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
project: infra-dev
|
|
source:
|
|
repoURL: https://helm.releases.hashicorp.com
|
|
chart: vault
|
|
targetRevision: 0.32.0
|
|
helm:
|
|
values: |
|
|
global:
|
|
externalVaultAddr: http://vault.vault.svc.cluster.local:8200
|
|
tlsDisable: true
|
|
server:
|
|
enabled: false
|
|
injector:
|
|
enabled: true
|
|
authPath: auth/kubernetes
|
|
webhook:
|
|
failurePolicy: Fail
|
|
namespaceSelector:
|
|
matchLabels:
|
|
vault-injection: enabled
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 250m
|
|
memory: 256Mi
|
|
agentImage:
|
|
repository: hashicorp/vault
|
|
tag: "1.18"
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: vault
|
|
syncPolicy:
|
|
automated:
|
|
enabled: true
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
- PruneLast=true
|
|
- ApplyOutOfSyncOnly=true
|
|
retry:
|
|
limit: 5
|
|
backoff:
|
|
duration: 5s
|
|
factor: 2
|
|
maxDuration: 3m
|
|
revisionHistoryLimit: 5
|