iac/infrastructure/vault/sarex-contour/vault.yaml
ivan b98b4b6ee3 ++ sarex-contour: vault dataStorage.size 10Gi
chart 0.2.3 дефолтит 20Gi, живой StatefulSet с 0.1.0 — 10Gi, поле
volumeClaimTemplates иммутабельно → helm upgrade падал Forbidden.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-10 18:44:14 +05:00

38 lines
1.2 KiB
YAML
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: vault
namespace: vault
spec:
interval: 5m
timeout: 10m
postRenderers:
# chart vault-contour 0.2.3 прибивает server-под к нодам dedicated=sts,
# в sarex-contour таких нод нет — снимаем nodeSelector/tolerations.
- kustomize:
patches:
- target:
group: apps
version: v1
kind: StatefulSet
namespace: vault
name: vault-vault-contour
patch: |-
- op: replace
path: /spec/template/spec/nodeSelector
value: {}
- op: replace
path: /spec/template/spec/tolerations
value: []
values:
imagePullSecrets:
- name: regcred
backup:
enabled: false
server:
dataStorage:
# chart 0.2.3 по умолчанию просит 20Gi; живой StatefulSet приехал
# с 0.1.0 на 10Gi, а размер PVC иммутабелен (local-path без
# allowVolumeExpansion) — держим 10Gi, чтобы helm upgrade прошёл.
size: 10Gi