this repo has no description
feat(infra/bootstrap): enable TLS for Vault/OpenBao
Change-Id: Idf295cf3fa5c645407cfb2fb7097be1615351cd1
+9
+9
infra/modules/bootstrap/vault.tf
+9
infra/modules/bootstrap/vault.tf
···
7
7
name = "csi-secrets-store"
8
8
namespace = helm_release.argocd.namespace
9
9
finalizers = ["resources-finalizer.argocd.argoproj.io"]
10
+
labels = local.common_labels
10
11
}
11
12
spec = {
12
13
project = "default"
···
34
35
name = "vault"
35
36
namespace = helm_release.argocd.namespace
36
37
finalizers = ["resources-finalizer.argocd.argoproj.io"]
38
+
labels = local.common_labels
37
39
}
38
40
spec = {
39
41
project = "default"
···
55
57
ingress = {
56
58
enabled = true
57
59
ingressClassName = "nginx"
60
+
annotations = {
61
+
"cert-manager.io/cluster-issuer" = "letsencrypt-prod"
62
+
}
58
63
hosts = [{
59
64
host = "vault.${var.cluster_domain}"
60
65
paths = [
61
66
"/"
62
67
]
68
+
}]
69
+
tls = [{
70
+
hosts = ["vault.${var.cluster_domain}"]
71
+
secretName = "vault-tls-certificate"
63
72
}]
64
73
}
65
74
}