feat(vault): deploy HashiCorp Vault 2.0.1 with raft HA (5 replicas)

StatefulSet with templated PVC (cephrbd-fast-delete, 10Gi), headless service for raft cluster communication, HTTPS gateway (443→8200), and kubernetes provider retry_join for automatic cluster formation.
2026-05-23 18:22:25 +10:00
parent dcea768c15
commit eef4c2cd49
13 changed files with 307 additions and 0 deletions
@@ -0,0 +1,19 @@
+ui = true
+
+listener "tcp" {
+  address         = "0.0.0.0:8200"
+  cluster_address = "0.0.0.0:8201"
+  tls_disable     = "true"
+}
+
+storage "raft" {
+  path = "/vault/data"
+
+  retry_join {
+    auto_join        = "provider=k8s label_selector=\"app.kubernetes.io/name=vault\" namespace=\"vault\""
+    auto_join_scheme = "http"
+    auto_join_port   = 8200
+  }
+}
+
+service_registration "kubernetes" {}