add hashicorp vault

chart/templates/project.yaml

@@ -14,4 +14,12 @@ spec:
   # Only permit applications to deploy to the tools namespace in the same cluster
   destinations:
   - namespace: tools
-    server: https://kubernetes.default.svc
+    server: https://kubernetes.default.svc
+
+  clusterResourceWhitelist:
+    - group: '*'
+      kind: ClusterRoleBinding
+    - group: '*'
+      kind: ClusterRole
+    - group: '*'
+      kind: MutatingWebhookConfiguration

chart/values.yaml

@@ -2,4 +2,4 @@ tools:
   - pgbouncer
   #- pgcat # trop contraignant: lister tous les databases/users et auth_type md5 uniquement
   # - prometheus
-  # - hashicorp_vault
+  - hashicorp-vault