apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: vault
  namespace: vault
spec:
  interval: 5m
  timeout: 10m
  postRenderers:
    # chart 0.2.3 прибивает server-под к нодам dedicated=sts; в sarex-contour
    # таких нод нет — снимаем nodeSelector/tolerations со StatefulSet.
    - kustomize:
        patches:
          - target:
              group: apps
              version: v1
              kind: StatefulSet
              namespace: vault
              name: vault-vault-contour
            patch: |-
              - op: replace
                path: /spec/template/spec/nodeSelector
                value: {}
              - op: replace
                path: /spec/template/spec/tolerations
                value: []
  values:
    imagePullSecrets:
      - name: regcred
    backup:
      enabled: false
    injector:
      nodeSelector: {}
      tolerations: []
    server:
      standalone:
        enabled: true
      ha:
        enabled: false
      nodeSelector: {}
      tolerations: []
      dataStorage:
        enabled: true
        size: 10Gi
    ui:
      enabled: true
      serviceType: ClusterIP