Create vault-secrets-operator through argo cd again

This commit is contained in:
2023-11-06 08:02:07 +01:00
parent 948de3960b
commit 6cbd1dcd38
8 changed files with 17 additions and 7 deletions
@@ -0,0 +1,6 @@
dependencies:
- name: vault-secrets-operator
repository: https://helm.releases.hashicorp.com
version: 0.3.4
digest: sha256:31a1abfdb72e2bbda888425b359389c93ae44e9f614e28e227181e69a0af08a7
generated: "2023-11-06T08:00:20.832546+01:00"
@@ -0,0 +1,9 @@
apiVersion: v2
name: vault-secrets-operator
version: 0.1.0
type: application
description: "Installs the authentication to communicate with HCP secrets"
dependencies:
- name: vault-secrets-operator
version: 0.3.4
repository: https://helm.releases.hashicorp.com
@@ -0,0 +1,4 @@
organizationId: "2015ed6d-3c84-48d5-9aca-99b0034b8b5a"
projectId: "21153839-1630-4f55-9803-0220e3af458d"
allowedNamespaces:
- name: wahlrecht
@@ -0,0 +1,73 @@
{{/*
Expand the name of the chart.
*/}}
{{- define "template.name" -}}
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
{{- end }}
{{/*
Create a default fully qualified app name.
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
If release name contains chart name it will be used as a full name.
*/}}
{{- define "template.fullname" -}}
{{- if .Values.fullnameOverride }}
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
{{- else }}
{{- $name := default .Chart.Name .Values.nameOverride }}
{{- if contains $name .Release.Name }}
{{- .Release.Name | trunc 63 | trimSuffix "-" }}
{{- else }}
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
{{- end }}
{{- end }}
{{- end }}
{{/*
Create chart name and version as used by the chart label.
*/}}
{{- define "template.chart" -}}
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
{{- end }}
{{/*
Common labels
*/}}
{{- define "template.labels" -}}
helm.sh/chart: {{ include "template.chart" . }}
{{ include "template.selectorLabels" . }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
{{- end }}
{{/*
Selector labels
*/}}
{{- define "template.selectorLabels" -}}
app.kubernetes.io/name: {{ include "template.name" . }}
app.kubernetes.io/instance: {{ .Release.Name }}
{{- end }}
{{/*
Create the name of the service account to use
*/}}
{{- define "template.serviceAccountName" -}}
{{- if .Values.serviceAccount.create }}
{{- default (include "template.fullname" .) .Values.serviceAccount.name }}
{{- else }}
{{- default "default" .Values.serviceAccount.name }}
{{- end }}
{{- end }}
{{- /*
template.util.merge will merge two YAML templates and output the result.
This takes an array of three values:
- the top context
- the template name of the overrides (destination)
- the template name of the base (source)
*/}}
{{- define "template.util.merge" -}}
{{- $top := first . -}}
{{- $overrides := fromYaml (include (index . 1) $top) | default (dict ) -}}
{{- $tpl := fromYaml (include (index . 2) $top) | default (dict ) -}}
{{- toYaml (merge $overrides $tpl) -}}
{{- end -}}
@@ -0,0 +1,17 @@
apiVersion: secrets.hashicorp.com/v1beta1
kind: HCPAuth
metadata:
name: hcp-auth
namespace: {{ .Release.Namespace }}
labels:
{{- include "template.labels" . | nindent 4 }}
spec:
organizationID: {{ .Values.organizationId }}
projectID: {{ .Values.projectId }}
allowedNamespaces:
- {{ .Release.Namespace }}
{{- range .Values.allowedNamespaces }}
- {{ .name }}
{{- end }}
servicePrincipal:
secretRef: vault-service-principal
@@ -0,0 +1,3 @@
organizationId: ""
projectId: ""
allowedNamespaces: []