ArgoCD Application Object for Vault

argocd-app-hcp-vault.yml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: microk8s-hcp-vault
  namespace: argocd
spec:
  syncPolicy:
    automated:
      prune: false
      selfHeal: true
    syncOptions:
    - CreateNamespace=true
    - PrunePropagationPolicy=foreground
    - PruneLast=false
  project: infrastructure
  sources:
    - chart: vault
      repoURL: https://helm.releases.hashicorp.com
      targetRevision: 0.28.0
      helm:
        values: |
          server:
            enabled: true
            priorityClassName: system-node-critical
            affinity: {}
            service:
              enabled: true
              active:
                enabled: true
                annotations: {}
              standby:
                enabled: true
              instanceSelector:
                enabled: false
            ingress:
              enabled: true
              annotations:
                kubernetes.io/ingress.class: nginx
              ingressClassName: nginx
              pathType: Prefix
              activeService: true
              hosts:
                - host: vault.local.io
            hostNetwork: false
            readinessProbe:
              enabled: false
            standalone:
              enabled: false
            dataStorage:
              enabled: true
              size: 10Gi
              mountPath: "/vault/data"
              storageClass: microk8s-hostpath
              accessMode: ReadWriteOnce
            ha:
              enabled: true
              replicas: 3
              raft:
                enabled: true
                setNodeId: true
                config: |
                  ui = true
          
                  listener "tcp" {
                    tls_disable = 1
                    address = "[::]:8200"
                    cluster_address = "[::]:8201"
                  }
          
                  storage "raft" {
                    path = "/vault/data"
                  }
          
                  service_registration "kubernetes" {}
          ui:
            enabled: true
            publishNotReadyAddresses: true
            activeVaultPodOnly: false
            serviceType: "ClusterIP"
            serviceNodePort: null
            externalPort: 8200
            targetPort: 8200
          config: |
            ui = true
      
            listener "tcp" {
              tls_disable = 1
              address = "[::]:8200"
              cluster_address = "[::]:8201"
            }
            storage "file" {
              path = "/vault/data"
            }

  destination:
    server: https://kubernetes.default.svc
    namespace: hcp-vault