ceph-csi/examples/kms/vault/tenant-config.yaml

---
# This is an optional (re)configuration of the connection to the Vault
# Service that can be created in a Kubernetes Namespace for a Tenant.
apiVersion: v1
kind: ConfigMap
metadata:
  name: ceph-csi-kms-config
data:
  vaultAddress: "http://vault.default.svc.cluster.local:8200"
  vaultBackendPath: "secret/"
  vaultTLSServerName: "vault.default.svc.cluster.local"
  vaultCAVerify: "false"
util: allow tenants to (re)configure VaultTokens settings A tenant can place a ConfigMap in their Kubernetes Namespace with configuration options that differ from the global (by the Storage Admin set) values. The ConfigMap needs to be located in the Tenants namespace, as described in the documentation See-also: docs/design/proposals/encryption-with-vault-tokens.md Signed-off-by: Niels de Vos <ndevos@redhat.com> 2020-12-15 08:11:53 +00:00			`---`
			`# This is an optional (re)configuration of the connection to the Vault`
			`# Service that can be created in a Kubernetes Namespace for a Tenant.`
			`apiVersion: v1`
			`kind: ConfigMap`
			`metadata:`
			`name: ceph-csi-kms-config`
			`data:`
			`vaultAddress: "http://vault.default.svc.cluster.local:8200"`
			`vaultBackendPath: "secret/"`
			`vaultTLSServerName: "vault.default.svc.cluster.local"`
			`vaultCAVerify: "false"`