This module will deploy hashicorp vault into a pre-existing AKS cluster
| Name | Version |
|---|---|
| azurerm | >= 2.0.0 |
| helm | >= 1.2.1 |
| random | n/a |
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| additional_yaml_config | yaml config for helm chart to be processed last | string |
"" |
no |
| identity_name | name for Azure identity to be used by AAD | string |
"aks-aad" |
no |
| kubernetes_namespace | kubernetes namespace where vault will be installed | string |
"default" |
no |
| kubernetes_node_selector | kubernetes node selector labels | map(string) |
{} |
no |
| location | Azure Region | string |
n/a | yes |
| names | names to be applied to resources | map(string) |
n/a | yes |
| resource_group_name | Resource group name | string |
n/a | yes |
| tags | tags to be applied to resources | map(string) |
n/a | yes |
| vault_agent_injector_enabled | enable Vault Agent Injector | bool |
true |
no |
| vault_agent_injector_sidecar_version | version of Vault Agent Injectort sidecar to install (defaults to <vault_version>) | string |
"" |
no |
| vault_agent_injector_version | version of Vault Agent Injector to install | string |
"0.3.0" |
no |
| vault_audit_data_storage_size | vault audit logs storage size | string |
"10Gi" |
no |
| vault_audit_storage_class | kubernetes storage class to use for vault audit logs | string |
"null" |
no |
| vault_audit_storage_size | vault audit storage size | string |
"10Gi" |
no |
| vault_data_storage_class | kubernetes storage class to use for vault data | string |
"null" |
no |
| vault_data_storage_size | vault data storage size | string |
"10Gi" |
no |
| vault_enable_audit_storage | kubernetes storage class to use for vault audit logs | string |
false |
no |
| vault_enable_data_storage | enable data storage for raft/file storage backend | bool |
true |
no |
| vault_enable_ha | enable ha (clustering) | bool |
true |
no |
| vault_enable_raft_backend | enable raft storage backend | bool |
true |
no |
| vault_enable_ui | enable vault ui | bool |
true |
no |
| vault_helm_chart_version | version of vault helm chart to use | string |
"0.6.0" |
no |
| vault_ingress_enabled | enable ingress controller | bool |
false |
no |
| vault_ingress_hostname | hostname for the ingress controller | string |
"" |
no |
| vault_ingress_tls_secret_name | enable ingress controller | string |
"" |
no |
| vault_version | version of Vault to install | string |
"1.4.2" |
no |
No output.