The following section lists some questions, problems, and tips that came up on the Bank-Vaults Slack channel.

Mutate ENV passed to a liveness or readiness probe 🔗︎

To mutate the ENV passed to a liveness or readiness probe, just put /vault/vault-env before /bin/sh, for example:

livenessProbe:
  exec:
    command:
    - /vault/vault-env
    - sh
    - -c
    - {{command-to-run}}

Login to the Vault web UI 🔗︎

To login to the Vault web UI, you can use the root token, or any configured authentication backend.

Can changing the vault CR delete the Vault instance and data? 🔗︎

Bank-Vaults never ever deletes the Vault instance from the cluster. However, if you delete the Vault CR, then the Kubernetes garbage controller deletes the vault pods. You are recommended to keep backups.

Set default for vault.security.banzaicloud.io/vault-addr 🔗︎

You can set the default settings for vault.security.banzaicloud.io/vault-addr so you don’t have to specify it in every PodSpec. Just set the VAULT_ADDR in the env section: https://github.com/banzaicloud/bank-vaults/blob/3c89e831bdb21b2733680f13ceec7ac4b6e3f892/charts/vault-secrets-webhook/values.yaml#L37

Edit this page on GitHub