From 123edce24589ee3a1d393323edcc4a46c8a9ad32 Mon Sep 17 00:00:00 2001 From: Michelle Weidling <98-mrodzis@users.noreply.gitlab.gwdg.de> Date: Mon, 11 Sep 2023 11:45:28 +0000 Subject: [PATCH] feat: add Vault annotations --- quiver-mongoapi-helm/Chart.yaml | 2 +- quiver-mongoapi-helm/values.yaml | 14 ++++++++++++-- 2 files changed, 13 insertions(+), 3 deletions(-) diff --git a/quiver-mongoapi-helm/Chart.yaml b/quiver-mongoapi-helm/Chart.yaml index 974368a..93b216c 100644 --- a/quiver-mongoapi-helm/Chart.yaml +++ b/quiver-mongoapi-helm/Chart.yaml @@ -15,7 +15,7 @@ type: application # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 0.2.0 +version: 0.3.0 # This is the version number of the application being deployed. This version number should be # incremented each time you make changes to the application. Versions are not expected to diff --git a/quiver-mongoapi-helm/values.yaml b/quiver-mongoapi-helm/values.yaml index 349f25a..84d58b3 100644 --- a/quiver-mongoapi-helm/values.yaml +++ b/quiver-mongoapi-helm/values.yaml @@ -10,6 +10,18 @@ image: # Overrides the image tag whose default is the chart appVersion. tag: "main" +podAnnotations: + vault.hashicorp.com/agent-inject: "true" + vault.hashicorp.com/agent-inject-secret-credentials.txt: subugoe/ocrd-quiver/mongodb + vault.hashicorp.com/agent-inject-template-credentials.txt: | + {{- with secret "subugoe/ocrd-quiver/mongodb" -}} + {{ .Data.data.users }} + {{ .Data.data.usersPasswords }} + {{- end -}} + vault.hashicorp.com/secret-volume-path-credentials.txt: /var/lib/quiver + vault.hashicorp.com/role: subugoe + + imagePullSecrets: [] nameOverride: "" fullnameOverride: "" @@ -23,8 +35,6 @@ serviceAccount: # If not set and create is true, a name is generated using the fullname template name: "" -podAnnotations: {} - podSecurityContext: {} # fsGroup: 2000 -- GitLab