values.yaml

global:
  tlsDisable: false

server:
  extraVolumes:
  - type: secret
    name: demo-vault
  - type: secret
    name: tls-test-server
  - type: secret
    name: tls-test-client

  extraEnvironmentVar:
    VAULT_CACERT=/vault/userconfig/tls-test-server/ca.crt

  image:
    repository: hashicorp/vault-enterprise
    tag: 1.7.0_ent

  standalone:
    enabled: true
    config: |
      listener "tcp" {
        address = "[::]:8200"
        cluster_address = "[::]:8201"
        tls_cert_file = "/vault/userconfig/tls-test-server/server.crt"
        tls_key_file = "/vault/userconfig/tls-test-server/server.key"
      }

      storage "file" {
        path = "/vault/data"
      }

  readinessProbe:
    path: "/v1/sys/health?standbyok=true&sealedcode=204&uninitcode=204"

  postStart:
  - "/bin/sh"
  - "-c"
  - "sleep 5 && cp /vault/userconfig/demo-vault/bootstrap.sh /tmp/bootstrap.sh && chmod +x /tmp/bootstrap.sh && /tmp/bootstrap.sh"

csi:
  enabled: true

  volumes:
  - name: tls
    secret:
      secretName: tls-test-client

  volumeMounts:
   - name: tls
     mountPath: "/vault/tls"
     readOnly: true