chore(bootstrap): Added Vault to ArgoCD

This commit is contained in:
Daniël Groothuis
2025-10-23 11:10:46 +02:00
parent 0860075eaa
commit cea2c92f6d
7 changed files with 93 additions and 0 deletions

View File

@@ -4,3 +4,4 @@ kind: Kustomization
resources:
- argocd
- vault

View File

@@ -0,0 +1,18 @@
---
apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
name: vault
namespace: vault
spec:
description: Kubernetes Secrets Management
sourceRepos:
- '*'
sourceNamespaces:
- '*'
destinations:
- namespace: '*'
server: '*'
clusterResourceWhitelist:
- group: '*'
kind: '*'

View File

@@ -0,0 +1,24 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: vault
namespace: vault
labels:
platform.dgse.cloud/cluster: artemis
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
project: vault
source:
repoURL: 'https://git.dgse.cloud/DGSE/kubernetes.git'
path: manifests/artemis/vault
targetRevision: HEAD
destination:
namespace: vault
name: in-cluster
syncPolicy:
syncOptions:
- CreateNamespace=true
automated:
prune: true
selfHeal: true

View File

@@ -0,0 +1,7 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- app-project.yaml
- application.yaml

View File

@@ -0,0 +1,23 @@
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
annotations:
cert-manager.io/cluster-issuer: letsencrypt
labels:
name: vault-ingress
spec:
rules:
- host: sealed.dgse.cloud
http:
paths:
- backend:
service:
name: vault
port:
number: 8200
path: /
pathType: Prefix
tls:
- hosts:
- sealed.dgse.cloud
secretName: letsencrypt

View File

@@ -0,0 +1,11 @@
---
resources:
- ingress.yaml
helmCharts:
- name: vault
repo: https://helm.releases.hashicorp.com/
version: 0.30.0
releaseName: vault
namespace: vault
valuesFile: values.yaml

View File

@@ -0,0 +1,9 @@
server:
ha:
enabled: true
raft:
enabled: true
replicas: 1
dataStorage:
enabled: true
size: 10Gi