Gabriel Radureau
8b1485e143
Adds VaultAuth + VaultStaticSecret + VaultDynamicSecret templates gated behind .Values.vault.enabled (default false). Default helm install keeps working in degraded mode. Chart becomes Vault-ready without activating Vault dependencies. iac/ terraform + Vault workflow follow as PR-IAC1 (requires user manual prereqs in Vault). Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
18 lines
427 B
YAML
18 lines
427 B
YAML
{{- if .Values.vault.enabled }}
|
|
apiVersion: secrets.hashicorp.com/v1beta1
|
|
kind: VaultDynamicSecret
|
|
metadata:
|
|
name: vso-db
|
|
namespace: {{ .Release.Namespace }}
|
|
spec:
|
|
mount: postgres
|
|
path: {{ .Values.vault.postgresPath }}
|
|
destination:
|
|
create: true
|
|
name: vso-db-credentials
|
|
rolloutRestartTargets:
|
|
- kind: Deployment
|
|
name: {{ include "dance-lessons-coach.fullname" . }}
|
|
vaultAuthRef: auth
|
|
{{- end }}
|