molgenis-ops-docker-helm/molgenis-vault

MOLGENIS Vault helm chart

This chart creates a vault operator, but NO vault. The vault operator defines a new custom resource named vault that you can use to create vaults.

After launching the operator, create the molgenis vault manually: kubectl create -f resources/vault.yaml

That creates a new vault with two vault pods.

See https://github.com/coreos/vault-operator/blob/master/doc/user/vault.md

Parameters

Azure cloud credentials

Define credentials for an S3 compatible backup bucket. See etcd-operator documentation.

Default values backup to the minio play server. You can host the stable/minio chart to backup to a bucket on the cluster.

Parameter	Description	Default
s3.accessKeyId	key id storage account	Q3AM3UQ867SPQQA43P2F
s3.secretAccessKey	secret access key of storage account	zuf+tfteSlswRu7BJ86wekitnifILbZam1KYY3TG
s3.region	region of the storage server	us-east-1
s3.endpoint	endpoint for the storage server	https://play.minio.io:9000
s3.bucket	name of the bucket on the storage server	vault

Backup job

Define the schedule of the backup job

Parameter	Description	Default
backupJob.suspend	Suspend backup cronjob	false
backupJob.schedule	cron schedule for the backup	0 12 * * 1

UI

Parameter	Description	Default
ui.replicaCount	desired number of Vault UI pod	1
ui.image.repository	Vault UI container image repository	djenriquez/vault-ui
ui.image.tag	Vault UI container image tag	latest
ui.resources	Vault UI pod resource requests & limits	{}
ui.nodeSelector	node labels for Vault UI pod assignment	{}
ui.ingress.enabled	If true, Vault UI Ingress will be created	true
ui.ingress.annotations	Vault UI Ingress annotations	{}
ui.ingress.host	Vault UI Ingress hostname	vault.molgenis.org
ui.ingress.tls	Vault UI Ingress TLS configuration (YAML)	[]
ui.vault.url	Vault UI default vault url	https://vault.vault-operator:8200
ui.vault.auth	Vault UI login method	GITHUB
ui.service.name	Vault UI service name	vault-ui
ui.service.type	type of ui service to create	ClusterIP
ui.service.externalPort	Vault UI service target port	8000
ui.service.internalPort	Vault UI container port	8000
ui.service.nodePort	Port to be used as the service NodePort (ignored if server.service.type is not NodePort)	0