iac/infrastructure/vault/sarex-contour/vault.yaml
ivan b9154da622 ++ sarex-contour: vault — снять nodeSelector dedicated=sts
chart vault-contour 0.2.3 прибивает server-под к нодам dedicated=sts,
в кластере их нет → под висел Pending. postRenderer + values обнуляют
nodeSelector/tolerations на StatefulSet и injector.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-10 18:17:47 +05:00

48 lines
1.2 KiB
YAML
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: vault
namespace: vault
spec:
interval: 5m
timeout: 10m
postRenderers:
# chart 0.2.3 прибивает server-под к нодам dedicated=sts; в sarex-contour
# таких нод нет — снимаем nodeSelector/tolerations со StatefulSet.
- kustomize:
patches:
- target:
group: apps
version: v1
kind: StatefulSet
namespace: vault
name: vault-vault-contour
patch: |-
- op: replace
path: /spec/template/spec/nodeSelector
value: {}
- op: replace
path: /spec/template/spec/tolerations
value: []
values:
imagePullSecrets:
- name: regcred
backup:
enabled: false
injector:
nodeSelector: {}
tolerations: []
server:
standalone:
enabled: true
ha:
enabled: false
nodeSelector: {}
tolerations: []
dataStorage:
enabled: true
size: 10Gi
ui:
enabled: true
serviceType: ClusterIP