add terminating and ingress gateways #894
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
kschoche
added
area/chart-only
kschoche
requested review from
ishustava and
t-eckert
and removed request for
a team
t-eckert
reviewed
Dec 2, 2021
| {{- if (and $root.Values.global.secretsBackend.vault.enabled $root.Values.global.tls.enabled) }} | ||
| "vault.hashicorp.com/agent-init-first": "true" | ||
| "vault.hashicorp.com/agent-inject": "true" | ||
| "vault.hashicorp.com/role": {{ $root.Values.global.secretsBackend.vault.consulCARole }} |
There was a problem hiding this comment.
I'm always going to read this as someone yelling the first part of the name "Carol". "CAR-ole!"
t-eckert
approved these changes
Dec 2, 2021
Thanks! I actually lifted them off #889 from @ishustava ! |
Co-authored-by: Iryna Shustava <ishustava@users.noreply.github.com>
kschoche
added a commit
that referenced
this pull request
Dec 7, 2021
* Support Vault server running with TLS (#874) * Change vault cluster in acceptance tests to only run with TLS. All tests will run against vault with TLS because that is the use case we think will be the most valuable for users to test * Support adding Vault CA as a secret to pods that will be using vault agent. We need to add two annotations to pods: * vault.hashicorp.com/agent-extra-secret with the value of the vault CA secret name. The secret will be mounted to vault agent at /vault/custom path. See docs here * vault.hashicorp.com/ca-cert - with the path of the ca file inside the vault agent container. This should be /vault/custom/<secret key> * Most pods will only need those annotations. The server pods also need the Vault CA secret to be mounted as a volume because it needs the CA to be on the file system for the vault connect CA provider. * add terminating and ingress gateways TLS support (#894) * Support TLS with vault for the server-acl-init job (#889) * Support TLS with Vault for the sync catalog deployment (#890) * Support server TLS with vault for the client snapshot agent deployment (#891) Co-authored-by: Iryna Shustava <iryna@hashicorp.com> Co-authored-by: Luke Kysow <1034429+lkysow@users.noreply.github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Changes proposed in this PR:
How I've tested this PR:
bats and acceptance tests added
How I expect reviewers to test this PR:
review tests
Checklist: