K3S-HOME/security
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

REFACTOR(postgresql): change vault from dev

Browse Source 
- to production mode with P...
- Disabled dev mode
- Added standalone mode with PostgreSQL storage backend
- Connected to postgresql-cnpg cluster (vault database)
- Added environment variable for PostgreSQL password from secret
- Increased resource limits (cpu: 100m, memory: 256Mi)
This commit is contained in:
Mayne0213
2025-12-27 23:52:40 +09:00
parent 5c918b64fc
commit c8f945034e
3 changed files with 58 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
vault/kustomization.yaml
View File

@@ -9,4 +9,5 @@ resources:
# External Secrets integration
# ServiceAccount is managed by external-secrets Helm chart
- cluster-secret-store.yaml
- vault-postgres-secret.yaml
# vault-config-job.yaml은 삭제됨 (민감한 정보 포함으로 인해 .md 파일로 대체)