apiVersion: argoproj.io/v1alpha1 kind: Application metadata: annotations: kubectl.kubernetes.io/last-applied-configuration: | {"apiVersion":"argoproj.io/v1alpha1","kind":"Application","metadata":{"annotations":{},"creationTimestamp":"2025-03-19T10:57:00Z","generation":1840,"labels":{"app.kubernetes.io/instance":"argo-infra-apps"},"name":"vault","namespace":"argocd","resourceVersion":"424507","uid":"62d1da68-9db5-4024-baa4-2f9bae7366f6"},"spec":{"destination":{"namespace":"vault","server":"https://kubernetes.default.svc"},"ignoreDifferences":[{"group":"admissionregistration.k8s.io","jsonPointers":["/webhooks/0/clientConfig/caBundle"],"kind":"MutatingWebhookConfiguration","name":"vault-agent-injector-cfg"}],"project":"default","source":{"helm":{"valueFiles":["values.yaml"]},"path":"vault","repoURL":"https://git.co-work.ru/cw-devops/cw-infra-apps.git","targetRevision":"main"},"syncPolicy":{"automated":{"prune":true,"selfHeal":true},"syncOptions":["CreateNamespace=true"]}},"status":{"controllerNamespace":"argocd","health":{"status":"Healthy"},"history":[{"deployStartedAt":"2025-03-19T10:57:06Z","deployedAt":"2025-03-19T10:57:07Z","id":0,"initiatedBy":{"automated":true},"revision":"ea003db2768a9cadc1e8a6ca0c9f6368a165243a","source":{"helm":{"valueFiles":["values.yaml"]},"path":"vault","repoURL":"https://git.co-work.ru/cw-devops/cw-infra-apps.git","targetRevision":"main"}},{"deployStartedAt":"2025-03-19T11:32:51Z","deployedAt":"2025-03-19T11:32:52Z","id":1,"initiatedBy":{"username":"admin"},"revision":"ea003db2768a9cadc1e8a6ca0c9f6368a165243a","source":{"helm":{"valueFiles":["values.yaml"]},"path":"vault","repoURL":"https://git.co-work.ru/cw-devops/cw-infra-apps.git","targetRevision":"main"}}],"operationState":{"finishedAt":"2025-03-19T11:32:52Z","message":"successfully synced (all tasks run)","operation":{"initiatedBy":{"username":"admin"},"retry":{},"sync":{"revision":"ea003db2768a9cadc1e8a6ca0c9f6368a165243a","syncOptions":["CreateNamespace=true"],"syncStrategy":{"hook":{}}}},"phase":"Succeeded","startedAt":"2025-03-19T11:32:51Z","syncResult":{"resources":[{"group":"policy","hookPhase":"Running","kind":"PodDisruptionBudget","message":"poddisruptionbudget.policy/vault configured","name":"vault","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"ServiceAccount","message":"serviceaccount/vault-agent-injector unchanged","name":"vault-agent-injector","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"ServiceAccount","message":"serviceaccount/vault unchanged","name":"vault","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"ConfigMap","message":"configmap/vault-config unchanged","name":"vault-config","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"rbac.authorization.k8s.io","hookPhase":"Running","kind":"ClusterRole","message":"clusterrole.rbac.authorization.k8s.io/vault-agent-injector-clusterrole reconciled. clusterrole.rbac.authorization.k8s.io/vault-agent-injector-clusterrole unchanged","name":"vault-agent-injector-clusterrole","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"rbac.authorization.k8s.io","hookPhase":"Running","kind":"ClusterRoleBinding","message":"clusterrolebinding.rbac.authorization.k8s.io/vault-server-binding reconciled. clusterrolebinding.rbac.authorization.k8s.io/vault-server-binding unchanged","name":"vault-server-binding","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"rbac.authorization.k8s.io","hookPhase":"Running","kind":"ClusterRoleBinding","message":"clusterrolebinding.rbac.authorization.k8s.io/vault-agent-injector-binding reconciled. clusterrolebinding.rbac.authorization.k8s.io/vault-agent-injector-binding unchanged","name":"vault-agent-injector-binding","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"rbac.authorization.k8s.io","hookPhase":"Running","kind":"Role","message":"role.rbac.authorization.k8s.io/vault-discovery-role reconciled. role.rbac.authorization.k8s.io/vault-discovery-role unchanged","name":"vault-discovery-role","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"rbac.authorization.k8s.io","hookPhase":"Running","kind":"RoleBinding","message":"rolebinding.rbac.authorization.k8s.io/vault-discovery-rolebinding reconciled. rolebinding.rbac.authorization.k8s.io/vault-discovery-rolebinding unchanged","name":"vault-discovery-rolebinding","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"Service","message":"service/vault-standby unchanged","name":"vault-standby","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"Service","message":"service/vault-active unchanged","name":"vault-active","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"Service","message":"service/vault-internal unchanged","name":"vault-internal","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"Service","message":"service/vault-agent-injector-svc unchanged","name":"vault-agent-injector-svc","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"Service","message":"service/vault unchanged","name":"vault","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"apps","hookPhase":"Running","kind":"Deployment","message":"deployment.apps/vault-agent-injector configured","name":"vault-agent-injector","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"apps","hookPhase":"Running","kind":"StatefulSet","message":"statefulset.apps/vault configured","name":"vault","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"admissionregistration.k8s.io","hookPhase":"Running","kind":"MutatingWebhookConfiguration","message":"mutatingwebhookconfiguration.admissionregistration.k8s.io/vault-agent-injector-cfg configured","name":"vault-agent-injector-cfg","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"}],"revision":"ea003db2768a9cadc1e8a6ca0c9f6368a165243a","source":{"helm":{"valueFiles":["values.yaml"]},"path":"vault","repoURL":"https://git.co-work.ru/cw-devops/cw-infra-apps.git","targetRevision":"main"}}},"reconciledAt":"2025-03-19T13:55:34Z","resources":[{"kind":"ConfigMap","name":"vault-config","namespace":"vault","status":"Synced","version":"v1"},{"health":{"status":"Healthy"},"kind":"Service","name":"vault","namespace":"vault","status":"Synced","version":"v1"},{"health":{"status":"Healthy"},"kind":"Service","name":"vault-active","namespace":"vault","status":"Synced","version":"v1"},{"health":{"status":"Healthy"},"kind":"Service","name":"vault-agent-injector-svc","namespace":"vault","status":"Synced","version":"v1"},{"health":{"status":"Healthy"},"kind":"Service","name":"vault-internal","namespace":"vault","status":"Synced","version":"v1"},{"health":{"status":"Healthy"},"kind":"Service","name":"vault-standby","namespace":"vault","status":"Synced","version":"v1"},{"kind":"ServiceAccount","name":"vault","namespace":"vault","status":"Synced","version":"v1"},{"kind":"ServiceAccount","name":"vault-agent-injector","namespace":"vault","status":"Synced","version":"v1"},{"group":"admissionregistration.k8s.io","kind":"MutatingWebhookConfiguration","name":"vault-agent-injector-cfg","status":"Synced","version":"v1"},{"group":"apps","health":{"status":"Healthy"},"kind":"Deployment","name":"vault-agent-injector","namespace":"vault","status":"Synced","version":"v1"},{"group":"apps","health":{"message":"statefulset has 3 ready pods","status":"Healthy"},"kind":"StatefulSet","name":"vault","namespace":"vault","status":"Synced","version":"v1"},{"group":"policy","kind":"PodDisruptionBudget","name":"vault","namespace":"vault","status":"Synced","version":"v1"},{"group":"rbac.authorization.k8s.io","kind":"ClusterRole","name":"vault-agent-injector-clusterrole","status":"Synced","version":"v1"},{"group":"rbac.authorization.k8s.io","kind":"ClusterRoleBinding","name":"vault-agent-injector-binding","status":"Synced","version":"v1"},{"group":"rbac.authorization.k8s.io","kind":"ClusterRoleBinding","name":"vault-server-binding","status":"Synced","version":"v1"},{"group":"rbac.authorization.k8s.io","kind":"Role","name":"vault-discovery-role","namespace":"vault","status":"Synced","version":"v1"},{"group":"rbac.authorization.k8s.io","kind":"RoleBinding","name":"vault-discovery-rolebinding","namespace":"vault","status":"Synced","version":"v1"}],"sourceType":"Helm","summary":{"images":["hashicorp/vault-k8s:1.6.2","hashicorp/vault:1.19.0"]},"sync":{"comparedTo":{"destination":{"namespace":"vault","server":"https://kubernetes.default.svc"},"ignoreDifferences":[{"group":"admissionregistration.k8s.io","jsonPointers":["/webhooks/0/clientConfig/caBundle"],"kind":"MutatingWebhookConfiguration","name":"vault-agent-injector-cfg"}],"source":{"helm":{"valueFiles":["values.yaml"]},"path":"vault","repoURL":"https://git.co-work.ru/cw-devops/cw-infra-apps.git","targetRevision":"main"}},"revision":"ea003db2768a9cadc1e8a6ca0c9f6368a165243a","status":"Synced"}}} creationTimestamp: "2025-03-19T14:00:58Z" generation: 76 labels: app.kubernetes.io/instance: argo-infra-apps name: vault namespace: argocd resourceVersion: "441729" uid: 495b57f6-384a-4a4e-b976-514011af6c45 spec: destination: namespace: client3 server: https://kubernetes.default.svc ignoreDifferences: - group: admissionregistration.k8s.io jsonPointers: - /webhooks/0/clientConfig/caBundle kind: MutatingWebhookConfiguration name: vault-agent-injector-cfg project: default source: helm: valueFiles: - values.yaml path: vault repoURL: https://git.co-work.ru/devops/cw-infra-apps.git targetRevision: client3 syncPolicy: automated: prune: true selfHeal: true syncOptions: - CreateNamespace=true status: controllerNamespace: argocd health: status: Healthy history: - deployStartedAt: "2025-03-19T10:57:06Z" deployedAt: "2025-03-19T10:57:07Z" id: 0 initiatedBy: automated: true revision: ea003db2768a9cadc1e8a6ca0c9f6368a165243a source: helm: valueFiles: - values.yaml path: vault repoURL: https://git.co-work.ru/devops/cw-infra-apps.git targetRevision: client-3 - deployStartedAt: "2025-03-19T11:32:51Z" deployedAt: "2025-03-19T11:32:52Z" id: 1 initiatedBy: username: admin revision: ea003db2768a9cadc1e8a6ca0c9f6368a165243a source: helm: valueFiles: - values.yaml path: vault repoURL: https://git.co-work.ru/devops/cw-infra-apps.git targetRevision: client3 - deployStartedAt: "2025-03-19T14:01:01Z" deployedAt: "2025-03-19T14:01:04Z" id: 2 initiatedBy: automated: true revision: ccbcd028530e5528739ce1fd9d30fa1a835db178 source: helm: valueFiles: - values.yaml path: vault repoURL: https://git.co-work.ru/devops/cw-infra-apps.git targetRevision: client3 - deployStartedAt: "2025-03-19T14:11:37Z" deployedAt: "2025-03-19T14:11:40Z" id: 3 initiatedBy: username: admin revision: 170f1d93a41905281cbf22e6e4bd394d1fd57b7f source: helm: valueFiles: - values.yaml path: vault repoURL: https://git.co-work.ru/devops/cw-infra-apps.git targetRevision: client3 operationState: finishedAt: "2025-03-19T14:11:40Z" message: successfully synced (all tasks run) operation: initiatedBy: username: admin retry: {} sync: prune: true revision: 170f1d93a41905281cbf22e6e4bd394d1fd57b7f syncOptions: - CreateNamespace=true - Replace=true syncStrategy: hook: force: true phase: Succeeded startedAt: "2025-03-19T14:11:37Z" syncResult: resources: - group: policy hookPhase: Running kind: PodDisruptionBudget message: |- poddisruptionbudget.policy "vault" deleted poddisruptionbudget.policy/vault replaced name: vault namespace: client3 status: Synced syncPhase: Sync version: v1 - group: "" hookPhase: Running kind: ServiceAccount message: |- serviceaccount "vault-agent-injector" deleted serviceaccount/vault-agent-injector replaced name: vault-agent-injector namespace: client3 status: Synced syncPhase: Sync version: v1 - group: "" hookPhase: Running kind: ServiceAccount message: |- serviceaccount "vault" deleted serviceaccount/vault replaced name: vault namespace: client3 status: Synced syncPhase: Sync version: v1 - group: "" hookPhase: Running kind: ConfigMap message: |- configmap "vault-config" deleted configmap/vault-config replaced name: vault-config namespace: client3 status: Synced syncPhase: Sync version: v1 - group: rbac.authorization.k8s.io hookPhase: Running kind: ClusterRole message: |- clusterrole.rbac.authorization.k8s.io/vault-agent-injector-clusterrole reconciled. clusterrole.rbac.authorization.k8s.io "vault-agent-injector-clusterrole" deleted clusterrole.rbac.authorization.k8s.io/vault-agent-injector-clusterrole replaced name: vault-agent-injector-clusterrole namespace: client3 status: Synced syncPhase: Sync version: v1 - group: rbac.authorization.k8s.io hookPhase: Running kind: ClusterRoleBinding message: |- clusterrolebinding.rbac.authorization.k8s.io/vault-server-binding reconciled. clusterrolebinding.rbac.authorization.k8s.io "vault-server-binding" deleted clusterrolebinding.rbac.authorization.k8s.io/vault-server-binding replaced name: vault-server-binding namespace: client3 status: Synced syncPhase: Sync version: v1 - group: rbac.authorization.k8s.io hookPhase: Running kind: ClusterRoleBinding message: |- clusterrolebinding.rbac.authorization.k8s.io/vault-agent-injector-binding reconciled. clusterrolebinding.rbac.authorization.k8s.io "vault-agent-injector-binding" deleted clusterrolebinding.rbac.authorization.k8s.io/vault-agent-injector-binding replaced name: vault-agent-injector-binding namespace: client3 status: Synced syncPhase: Sync version: v1 - group: rbac.authorization.k8s.io hookPhase: Running kind: Role message: |- role.rbac.authorization.k8s.io/vault-discovery-role reconciled. role.rbac.authorization.k8s.io "vault-discovery-role" deleted role.rbac.authorization.k8s.io/vault-discovery-role replaced name: vault-discovery-role namespace: client3 status: Synced syncPhase: Sync version: v1 - group: rbac.authorization.k8s.io hookPhase: Running kind: RoleBinding message: |- rolebinding.rbac.authorization.k8s.io/vault-discovery-rolebinding reconciled. rolebinding.rbac.authorization.k8s.io "vault-discovery-rolebinding" deleted rolebinding.rbac.authorization.k8s.io/vault-discovery-rolebinding replaced name: vault-discovery-rolebinding namespace: client3 status: Synced syncPhase: Sync version: v1 - group: "" hookPhase: Running kind: Service message: |- service "vault-internal" deleted service/vault-internal replaced name: vault-internal namespace: client3 status: Synced syncPhase: Sync version: v1 - group: "" hookPhase: Running kind: Service message: |- service "vault-agent-injector-svc" deleted service/vault-agent-injector-svc replaced name: vault-agent-injector-svc namespace: client3 status: Synced syncPhase: Sync version: v1 - group: "" hookPhase: Running kind: Service message: |- service "vault-standby" deleted service/vault-standby replaced name: vault-standby namespace: client3 status: Synced syncPhase: Sync version: v1 - group: "" hookPhase: Running kind: Service message: |- service "vault" deleted service/vault replaced name: vault namespace: client3 status: Synced syncPhase: Sync version: v1 - group: "" hookPhase: Running kind: Service message: |- service "vault-active" deleted service/vault-active replaced name: vault-active namespace: client3 status: Synced syncPhase: Sync version: v1 - group: apps hookPhase: Running kind: Deployment message: |- deployment.apps "vault-agent-injector" deleted deployment.apps/vault-agent-injector replaced name: vault-agent-injector namespace: client3 status: Synced syncPhase: Sync version: v1 - group: apps hookPhase: Running kind: StatefulSet message: |- statefulset.apps "vault" deleted statefulset.apps/vault replaced name: vault namespace: client3 status: Synced syncPhase: Sync version: v1 - group: admissionregistration.k8s.io hookPhase: Running kind: MutatingWebhookConfiguration message: |- mutatingwebhookconfiguration.admissionregistration.k8s.io "vault-agent-injector-cfg" deleted mutatingwebhookconfiguration.admissionregistration.k8s.io/vault-agent-injector-cfg replaced name: vault-agent-injector-cfg namespace: client3 status: Synced syncPhase: Sync version: v1 revision: 170f1d93a41905281cbf22e6e4bd394d1fd57b7f source: helm: valueFiles: - values.yaml path: vault repoURL: https://git.co-work.ru/devops/cw-infra-apps.git targetRevision: client3 reconciledAt: "2025-03-19T15:31:34Z" resources: - kind: ConfigMap name: vault-config namespace: client3 status: Synced version: v1 - health: status: Healthy kind: Service name: vault namespace: client3 status: Synced version: v1 - health: status: Healthy kind: Service name: vault-active namespace: client3 status: Synced version: v1 - health: status: Healthy kind: Service name: vault-agent-injector-svc namespace: client3 status: Synced version: v1 - health: status: Healthy kind: Service name: vault-internal namespace: client3 status: Synced version: v1 - health: status: Healthy kind: Service name: vault-standby namespace: client3 status: Synced version: v1 - kind: ServiceAccount name: vault namespace: client3 status: Synced version: v1 - kind: ServiceAccount name: vault-agent-injector namespace: client3 status: Synced version: v1 - group: admissionregistration.k8s.io kind: MutatingWebhookConfiguration name: vault-agent-injector-cfg status: Synced version: v1 - group: apps health: status: Healthy kind: Deployment name: vault-agent-injector namespace: client3 status: Synced version: v1 - group: apps health: message: statefulset has 3 ready pods status: Healthy kind: StatefulSet name: vault namespace: client3 status: Synced version: v1 - group: policy kind: PodDisruptionBudget name: vault namespace: client3 status: Synced version: v1 - group: rbac.authorization.k8s.io kind: ClusterRole name: vault-agent-injector-clusterrole status: Synced version: v1 - group: rbac.authorization.k8s.io kind: ClusterRoleBinding name: vault-agent-injector-binding status: Synced version: v1 - group: rbac.authorization.k8s.io kind: ClusterRoleBinding name: vault-server-binding status: Synced version: v1 - group: rbac.authorization.k8s.io kind: Role name: vault-discovery-role namespace: client3 status: Synced version: v1 - group: rbac.authorization.k8s.io kind: RoleBinding name: vault-discovery-rolebinding namespace: client3 status: Synced version: v1 sourceType: Helm summary: images: - hashicorp/vault-k8s:1.6.2 - hashicorp/vault:1.19.0 sync: comparedTo: destination: namespace: client3 server: https://kubernetes.default.svc ignoreDifferences: - group: admissionregistration.k8s.io jsonPointers: - /webhooks/0/clientConfig/caBundle kind: MutatingWebhookConfiguration name: vault-agent-injector-cfg source: helm: valueFiles: - values.yaml path: vault repoURL: https://git.co-work.ru/cw-devops/cw-infra-apps.git targetRevision: main revision: 51a8196fc681a3e098bb86eb1f2dd0889bfab910 status: Synced