iac/infrastructure/vault/sarex-contour/vault.yaml
ivan f3e2f84947 ++ sarex-contour: vault — values по образцу ugok
chart 0.2.3 игнорирует server.standalone/ha.enabled и рендерит raft;
не воюем с ним — values только regcred + backup off, как в overlay ugok.
postRenderer снимает nodeSelector dedicated=sts.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-10 18:28:10 +05:00

32 lines
874 B
YAML

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: vault
namespace: vault
spec:
interval: 5m
timeout: 10m
postRenderers:
# chart vault-contour 0.2.3 прибивает server-под к нодам dedicated=sts,
# в sarex-contour таких нод нет — снимаем nodeSelector/tolerations.
- kustomize:
patches:
- target:
group: apps
version: v1
kind: StatefulSet
namespace: vault
name: vault-vault-contour
patch: |-
- op: replace
path: /spec/template/spec/nodeSelector
value: {}
- op: replace
path: /spec/template/spec/tolerations
value: []
values:
imagePullSecrets:
- name: regcred
backup:
enabled: false