Initial commit

infrastructure/vault/values.yaml

@@ -0,0 +1,45 @@
+server:
+  # HA mode with Raft integrated storage
+  ha:
+    enabled: true
+    replicas: 3
+    raft:
+      enabled: true
+      config: |
+        ui = true
+        listener "tcp" {
+          address     = "0.0.0.0:8200"
+          tls_disable = 1
+        }
+        storage "raft" {
+          path = "/vault/data"
+        }
+        disable_mlock = true
+        service_registration "kubernetes" {}
+        telemetry {
+          prometheus_retention_time = "30s"
+          disable_hostname = true
+        }
+
+  standalone:
+    enabled: false
+
+  dataStorage:
+    enabled: true
+    size: 10Gi
+
+  extraEnvironmentVars: {}
+
+  # Tolerate control-plane taint
+  tolerations:
+    - key: node-role.kubernetes.io/control-plane
+      operator: Exists
+      effect: NoSchedule
+
+# Enable ServiceMonitor for Prometheus
+serverTelemetry:
+  serviceMonitor:
+    enabled: true
+    selectors:
+      release: prometheus
+    interval: 30s