vault values.yaml¶
global.domain¶
Type: string
Default value
"dev.bigbang.mil"
monitoring.enabled¶
Type: bool
Default value
false
monitoring.namespace¶
Type: string
Default value
"monitoring"
monitoring.serviceAccountName¶
Type: string
Default value
"monitoring-monitoring-kube-prometheus"
tls.cert¶
Type: string
Default value
""
tls.key¶
Type: string
Default value
""
bb-common.routes.inbound.vault.enabled¶
Type: bool
Default value
true
bb-common.routes.inbound.vault.gateways[0]¶
Type: string
Default value
"istio-gateway/passthrough-ingressgateway"
bb-common.routes.inbound.vault.hosts[0]¶
Type: string
Default value
"vault.{{ .Values.global.domain }}"
bb-common.routes.inbound.vault.service¶
Type: string
Default value
"vault-vault.vault.svc.cluster.local"
bb-common.routes.inbound.vault.port¶
Type: int
Default value
8200
bb-common.routes.inbound.vault.passthrough.enabled¶
Type: bool
Default value
true
bb-common.istio.enabled¶
Type: bool
Default value
false
bb-common.istio.sidecar.enabled¶
Type: bool
Default value
false
bb-common.istio.sidecar.outboundTrafficPolicyMode¶
Type: string
Default value
"REGISTRY_ONLY"
bb-common.istio.serviceEntries.custom¶
Type: list
Default value
[]
bb-common.istio.authorizationPolicies.enabled¶
Type: bool
Default value
false
bb-common.istio.authorizationPolicies.custom¶
Type: list
Default value
[]
bb-common.istio.mtls.mode¶
Type: string
Default value
"STRICT"
bb-common.networkPolicies.enabled¶
Type: bool
Default value
false
bb-common.networkPolicies.ingress.definitions.custom-app-ingress.from[0].namespaceSelector¶
Type: object
Default value
{}
bb-common.networkPolicies.ingress.definitions.custom-app-ingress.from[0].podSelector.matchLabels.vault-ingress¶
Type: string
Default value
"true"
bb-common.networkPolicies.ingress.to.vault:8200.from.k8s.monitoring-monitoring-kube-prometheus@monitoring/prometheus¶
Type: bool
Default value
false
bb-common.networkPolicies.ingress.to.vault:8200.from.definition.custom-app-ingress¶
Type: bool
Default value
true
bb-common.networkPolicies.ingress.to.vault-agent-injector:8080.from.cidr.”0.0.0.0/0”¶
Type: bool
Default value
true
bb-common.networkPolicies.egress.definitions.kms.to[0].ipBlock.cidr¶
Type: string
Default value
"0.0.0.0/0"
bb-common.networkPolicies.egress.definitions.kms.ports[0].port¶
Type: int
Default value
443
bb-common.networkPolicies.egress.definitions.kms.ports[0].protocol¶
Type: string
Default value
"TCP"
bb-common.networkPolicies.egress.from.vault.to.cidr.”169.254.169.254/32”¶
Type: bool
Default value
true
bb-common.networkPolicies.egress.from.vault.to.k8s.tempo/tempo:9411¶
Type: bool
Default value
false
bb-common.networkPolicies.egress.from.vault.to.definition.kms¶
Type: bool
Default value
true
bb-common.networkPolicies.egress.from.vault.to.definition.kubeAPI¶
Type: bool
Default value
true
bb-common.networkPolicies.egress.from.vault-agent-injector.to.definition.kubeAPI¶
Type: bool
Default value
true
bb-common.networkPolicies.additionalPolicies¶
Type: list
Default value
[]
autoInit.enabled¶
Type: bool
Default value
true
autoInit.secretName¶
Type: string
Default value
"vault-token"
autoInit.configureMonitoring¶
Type: bool
Default value
true
bbtests.enabled¶
Type: bool
Default value
false
bbtests.cypress.resources.requests.cpu¶
Type: int
Default value
2
bbtests.cypress.resources.requests.memory¶
Type: string
Default value
"8Gi"
bbtests.cypress.resources.limits.cpu¶
Type: int
Default value
2
bbtests.cypress.resources.limits.memory¶
Type: string
Default value
"8Gi"
bbtests.cypress.artifacts¶
Type: bool
Default value
true
bbtests.cypress.envs.cypress_vault_url¶
Type: string
Default value
"https://vault.dev.bigbang.mil"
bbtests.cypress.secretEnvs[0].name¶
Type: string
Default value
"cypress_token"
bbtests.cypress.secretEnvs[0].valueFrom.secretKeyRef.name¶
Type: string
Default value
"vault-token"
bbtests.cypress.secretEnvs[0].valueFrom.secretKeyRef.key¶
Type: string
Default value
"key"
bbtests.cypress.disableDefaultTests¶
Type: bool
Default value
false
bbtests.scripts.permissions.apiGroups[0]¶
Type: string
Default value
""
bbtests.scripts.permissions.resources[0]¶
Type: string
Default value
"configmaps"
bbtests.scripts.permissions.verbs[0]¶
Type: string
Default value
"create"
bbtests.scripts.permissions.verbs[1]¶
Type: string
Default value
"delete"
bbtests.scripts.permissions.verbs[2]¶
Type: string
Default value
"list"
bbtests.scripts.permissions.verbs[3]¶
Type: string
Default value
"get"
bbtests.scripts.image¶
Type: string
Default value
"registry1.dso.mil/ironbank/hashicorp/vault:1.21.4"
bbtests.scripts.envs.VAULT_ADDR¶
Type: string
Default value
"{{ ternary \"https://vault-vault:8200\" \"http://vault-vault:8200\" (and (not .Values.upstream.global.tlsDisable) (not (empty .Values.tls.cert)) (not (empty .Values.tls.key))) }}"
bbtests.scripts.envs.VAULT_SKIP_VERIFY¶
Type: string
Default value
"true"
bbtests.scripts.envs.VAULT_S3_ENDPOINT¶
Type: string
Default value
""
bbtests.scripts.envs.VAULT_S3_BUCKET¶
Type: string
Default value
"vault"
bbtests.scripts.envs.VAULT_S3_REGION¶
Type: string
Default value
"garage"
bbtests.scripts.envs.VAULT_S3_ACCESS_KEY¶
Type: string
Default value
""
bbtests.scripts.envs.VAULT_S3_SECRET_KEY¶
Type: string
Default value
""
bbtests.scripts.secretEnvs[0].name¶
Type: string
Default value
"vault_token"
bbtests.scripts.secretEnvs[0].valueFrom.secretKeyRef.name¶
Type: string
Default value
"vault-token"
bbtests.scripts.secretEnvs[0].valueFrom.secretKeyRef.key¶
Type: string
Default value
"key"
openshift¶
Type: bool
Default value
false