mirror of
https://github.com/dredx/prole.git
synced 2026-09-27 03:24:31 +00:00
ec8a4e98af
- Implement proactive CA hash verification and automated repair for mismatches - Ensure agents prioritize discovered server tokens over stale vault values - Fix K3s service hangs with explicit stop and killall before reinstall - Add Retropie/Pi networking fixes (WiFi power save, wlan0 priority) - Pin pre-staged images to stable, architecture-aware versions (arm64) - Remove obsolete init-port-forwards and prole.cfg sync tasks - Update k8s manifests and installer core logic with new tests
61 lines
1.3 KiB
YAML
61 lines
1.3 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: openbao
|
|
labels:
|
|
app: openbao
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: openbao
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: openbao
|
|
spec:
|
|
containers:
|
|
- name: openbao
|
|
image: ghcr.io/openbao/openbao:2.0.0
|
|
imagePullPolicy: IfNotPresent
|
|
args:
|
|
- "server"
|
|
- "-dev"
|
|
- "-dev-listen-address=0.0.0.0:8200"
|
|
- "-dev-root-token-id=405f3fd4ceea0f00952532333e3035b240b404e9d30e0b7f"
|
|
ports:
|
|
- name: http
|
|
containerPort: 8200
|
|
env:
|
|
- name: VAULT_DEV_ROOT_TOKEN_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: openbao-root
|
|
key: token
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /v1/sys/health
|
|
port: 8200
|
|
initialDelaySeconds: 3
|
|
periodSeconds: 3
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: openbao
|
|
spec:
|
|
selector:
|
|
app: openbao
|
|
ports:
|
|
- name: http
|
|
port: 8200
|
|
targetPort: 8200
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: openbao-root
|
|
type: Opaque
|
|
data:
|
|
token: NDA1ZjNmZDRjZWVhMGYwMDk1MjUzMjMzM2UzMDM1YjI0MGI0MDRlOWQzMGUwYjdm
|