starlingx/docs
Code Issues Proposed changes
Files
2cb4e4192d9afd3174478a4b7ec5e91c5c0bdbda
docs/doc/source/security/kubernetes/install-vault.rst
Keane Lim 3c5fa979a4 Security guide update 
Re-organized topic hierarchy

Tiny edit to restart review workflow.

Squashed with Resolved index.rst conflict commit

Change-Id: I13472792cb19d1e9975ac76c6954d38054d606c5
Signed-off-by: Keane Lim <keane.lim@windriver.com>
Signed-off-by: MCamp859 <maryx.camp@intel.com>
2021-03-12 15:10:40 -05:00

1.6 KiB
Raw Blame History

Install Vault

Vault is packaged as an Armada system application and is managed using system application, and system helm-override commands.

Note

Vault requires a storage backend with PVC enabled (for example, Ceph).

To install Vault, use the following procedure:

  1. Locate the Vault tarball in /usr/local/share/applications/helm.

    For example, /usr/local/share/applications/helm/vault-20.06-9.tgz.

  2. Upload Vault, using the following command:

    $ system application-upload /usr/local/share/applications/helm/vault-20.06-9.tgz

  3. Verify the Vault tarball has been uploaded.

    $ system application-list

  4. Apply the Vault application.

    $ system application-apply vault

  5. Monitor the status.

    $ watch -n 5 system application-list

    or

    $ watch kubectl get pods -n vault

    It takes a few minutes for all the pods to start and for Vault-manager to initialize the cluster.

    The default configuration for the installed Vault application is:

    Vault-manager

    Runs as a statefulset, replica count of 1

    Vault-agent-injector

    Runs as a deployment, replica count of 1

    Vault

    Runs as statefulset, replica count is 1 on systems with fewer than 3 nodes, replica count is 3 on systems with 3 or more nodes

For more information, see Configure Vault <configure-vault>.