diff --git a/.gitignore b/.gitignore index 2416204..179fc9c 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,3 @@ /secrets secrets.yaml +bao-root.json diff --git a/helm/openbao/kustomization.yaml b/helm/openbao/kustomization.yaml index 33ce5ae..eb3882c 100644 --- a/helm/openbao/kustomization.yaml +++ b/helm/openbao/kustomization.yaml @@ -10,11 +10,16 @@ helmCharts: injector: enabled: false server: + image: + registry: git.janky.solutions + repository: jankysolutions/infra/openbao + tag: latest ha: enabled: true - repliacas: 3 raft: enabled: true + ui: + enabled: true releaseName: openbao version: 0.4.0 repo: https://openbao.github.io/openbao-helm diff --git a/k8s/operators/kustomization.yaml b/k8s/operators/kustomization.yaml index 0513a87..a31b698 100644 --- a/k8s/operators/kustomization.yaml +++ b/k8s/operators/kustomization.yaml @@ -4,4 +4,5 @@ resources: - longhorn - postgres-operator - cert-manager + - openbao - kube-prometheus diff --git a/k8s/operators/openbao/bundle.yaml b/k8s/operators/openbao/bundle.yaml index 8920670..25e9c3b 100644 --- a/k8s/operators/openbao/bundle.yaml +++ b/k8s/operators/openbao/bundle.yaml @@ -202,6 +202,28 @@ spec: component: server openbao-active: "false" --- +apiVersion: v1 +kind: Service +metadata: + labels: + app.kubernetes.io/instance: openbao + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: openbao-ui + helm.sh/chart: openbao-0.4.0 + name: openbao-ui + namespace: openbao +spec: + ports: + - name: http + port: 8200 + targetPort: 8200 + publishNotReadyAddresses: true + selector: + app.kubernetes.io/instance: openbao + app.kubernetes.io/name: openbao + component: server + type: ClusterIP +--- apiVersion: apps/v1 kind: StatefulSet metadata: @@ -285,7 +307,7 @@ spec: value: https://$(HOSTNAME).openbao-internal:8201 - name: HOME value: /home/openbao - image: quay.io/openbao/openbao:2.0.0-alpha20240329 + image: git.janky.solutions/jankysolutions/infra/openbao:latest imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -398,7 +420,7 @@ spec: env: - name: VAULT_ADDR value: http://openbao.openbao.svc:8200 - image: quay.io/openbao/openbao:2.0.0-alpha20240329 + image: git.janky.solutions/jankysolutions/infra/openbao:latest imagePullPolicy: IfNotPresent name: openbao-server-test volumeMounts: null diff --git a/k8s/operators/openbao/kustomization.yaml b/k8s/operators/openbao/kustomization.yaml index 0c52546..456d166 100644 --- a/k8s/operators/openbao/kustomization.yaml +++ b/k8s/operators/openbao/kustomization.yaml @@ -4,3 +4,13 @@ namespace: openbao resources: - namespace.yaml - bundle.yaml +patches: + - target: + kind: Pod + name: openbao-server-test + patch: | + $patch: delete + apiVersion: v1 + kind: Pod + metadata: + name: openbao-server-test