5f542e7632
We can host s3 compatible storage locally by deploying the stable/minio chart. Ran into https://github.com/coreos/etcd-operator/issues/1980 and therefore downgrade the backup and restore operator images to 0.8.3. |
||
|---|---|---|
| .. | ||
| charts | ||
| resources | ||
| templates | ||
| .helmignore | ||
| catalogIcon-molgenis-vault.svg | ||
| Chart.yaml | ||
| README.md | ||
| requirements.lock | ||
| requirements.yaml | ||
| values.yaml | ||
MOLGENIS Vault helm chart
This chart creates a vault operator, but NO vault.
The vault operator defines a new custom resource named vault that you can use to create vaults.
After launching the operator, create the molgenis vault manually:
kubectl create -f resources/vault.yaml
That creates a new vault with two vault pods.
See https://github.com/coreos/vault-operator/blob/master/doc/user/vault.md
Parameters
Azure cloud credentials
Define credentials for an S3 compatible backup bucket. See etcd-operator documentation.
Default values backup to the minio play server. You can host the stable/minio chart to backup to a bucket on the cluster.
| Parameter | Description | Default |
|---|---|---|
s3.accessKeyId |
key id storage account | Q3AM3UQ867SPQQA43P2F |
s3.secretAccessKey |
secret access key of storage account | zuf+tfteSlswRu7BJ86wekitnifILbZam1KYY3TG |
s3.region |
region of the storage server | us-east-1 |
s3.endpoint |
endpoint for the storage server | https://play.minio.io:9000 |
s3.bucket |
name of the bucket on the storage server | vault |
Backup job
Define the schedule of the backup job
| Parameter | Description | Default |
|---|---|---|
backupJob.suspend |
Suspend backup cronjob | false |
backupJob.schedule |
cron schedule for the backup | 0 12 * * 1 |
UI
| Parameter | Description | Default |
|---|---|---|
ui.replicaCount |
desired number of Vault UI pod | 1 |
ui.image.repository |
Vault UI container image repository | djenriquez/vault-ui |
ui.image.tag |
Vault UI container image tag | latest |
ui.resources |
Vault UI pod resource requests & limits | {} |
ui.nodeSelector |
node labels for Vault UI pod assignment | {} |
ui.ingress.enabled |
If true, Vault UI Ingress will be created | true |
ui.ingress.annotations |
Vault UI Ingress annotations | {} |
ui.ingress.host |
Vault UI Ingress hostname | vault.molgenis.org |
ui.ingress.tls |
Vault UI Ingress TLS configuration (YAML) | [] |
ui.vault.url |
Vault UI default vault url | https://vault.vault-operator:8200 |
ui.vault.auth |
Vault UI login method | GITHUB |
ui.service.name |
Vault UI service name | vault-ui |
ui.service.type |
type of ui service to create | ClusterIP |
ui.service.externalPort |
Vault UI service target port | 8000 |
ui.service.internalPort |
Vault UI container port | 8000 |
ui.service.nodePort |
Port to be used as the service NodePort (ignored if server.service.type is not NodePort) |
0 |