prole/deploy/opentofu/k3s/manifests/knoe/openbao-statefulset.yaml

58 lines
1.3 KiB
YAML

apiVersion: apps/v1
kind: StatefulSet
metadata:
name: openbao
labels:
app: openbao
spec:
serviceName: openbao
replicas: 1
selector:
matchLabels:
app: openbao
template:
metadata:
labels:
app: openbao
spec:
nodeSelector:
kubernetes.io/hostname: myrddin.knoe.org
containers:
- name: openbao
image: ghcr.io/openbao/openbao:2.0.0
imagePullPolicy: IfNotPresent
args:
- server
- -dev
- -dev-listen-address=0.0.0.0:8200
- -dev-root-token-id=root
env:
- name: VAULT_DEV_ROOT_TOKEN_ID
value: root
- name: VAULT_ADDR
value: http://127.0.0.1:8200
ports:
- containerPort: 8200
name: http
readinessProbe:
httpGet:
path: /v1/sys/health
port: http
initialDelaySeconds: 5
periodSeconds: 10
volumeMounts:
- name: data
mountPath: /data
volumeClaimTemplates:
- metadata:
name: data
spec:
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 1Gi
storageClassName: synology-iscsi
selector:
matchLabels:
synology.storage/role: openbao