mirror of
https://github.com/ceph/ceph-csi.git
synced 2024-11-12 17:30:19 +00:00
a5211dcf0e
It seems that the version of the key/value engine can not always be
detected for Hashicorp Vault. In certain cases, it is required to
configure the `VAULT_BACKEND` (or `vaultBackend`) option so that a
successful connection to the service can be made.
The `kv-v2` is the current default for development deployments of
Hashicorp Vault (what we use for automated testing). Production
deployments default to version 1 for now.
Signed-off-by: Niels de Vos <ndevos@redhat.com>
(cherry picked from commit 82557e3f34)
14 lines
417 B
YAML
14 lines
417 B
YAML
---
|
|
# This is an optional (re)configuration of the connection to the Vault
|
|
# Service that can be created in a Kubernetes Namespace for a Tenant.
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: ceph-csi-kms-config
|
|
data:
|
|
vaultAddress: "http://vault.default.svc.cluster.local:8200"
|
|
vaultBackend: "kv-v1"
|
|
vaultBackendPath: "secret/"
|
|
vaultTLSServerName: "vault.default.svc.cluster.local"
|
|
vaultCAVerify: "false"
|