cw-infra-apps/argo-infra-apps/vault.yaml

443 lines
21 KiB
YAML

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
annotations:
kubectl.kubernetes.io/last-applied-configuration: |
{"apiVersion":"argoproj.io/v1alpha1","kind":"Application","metadata":{"annotations":{},"creationTimestamp":"2025-03-19T10:57:00Z","generation":1840,"labels":{"app.kubernetes.io/instance":"argo-infra-apps"},"name":"vault","namespace":"argocd","resourceVersion":"424507","uid":"62d1da68-9db5-4024-baa4-2f9bae7366f6"},"spec":{"destination":{"namespace":"vault","server":"https://kubernetes.default.svc"},"ignoreDifferences":[{"group":"admissionregistration.k8s.io","jsonPointers":["/webhooks/0/clientConfig/caBundle"],"kind":"MutatingWebhookConfiguration","name":"vault-agent-injector-cfg"}],"project":"default","source":{"helm":{"valueFiles":["values.yaml"]},"path":"vault","repoURL":"https://git.co-work.ru/cw-devops/cw-infra-apps.git","targetRevision":"main"},"syncPolicy":{"automated":{"prune":true,"selfHeal":true},"syncOptions":["CreateNamespace=true"]}},"status":{"controllerNamespace":"argocd","health":{"status":"Healthy"},"history":[{"deployStartedAt":"2025-03-19T10:57:06Z","deployedAt":"2025-03-19T10:57:07Z","id":0,"initiatedBy":{"automated":true},"revision":"ea003db2768a9cadc1e8a6ca0c9f6368a165243a","source":{"helm":{"valueFiles":["values.yaml"]},"path":"vault","repoURL":"https://git.co-work.ru/cw-devops/cw-infra-apps.git","targetRevision":"main"}},{"deployStartedAt":"2025-03-19T11:32:51Z","deployedAt":"2025-03-19T11:32:52Z","id":1,"initiatedBy":{"username":"admin"},"revision":"ea003db2768a9cadc1e8a6ca0c9f6368a165243a","source":{"helm":{"valueFiles":["values.yaml"]},"path":"vault","repoURL":"https://git.co-work.ru/cw-devops/cw-infra-apps.git","targetRevision":"main"}}],"operationState":{"finishedAt":"2025-03-19T11:32:52Z","message":"successfully synced (all tasks run)","operation":{"initiatedBy":{"username":"admin"},"retry":{},"sync":{"revision":"ea003db2768a9cadc1e8a6ca0c9f6368a165243a","syncOptions":["CreateNamespace=true"],"syncStrategy":{"hook":{}}}},"phase":"Succeeded","startedAt":"2025-03-19T11:32:51Z","syncResult":{"resources":[{"group":"policy","hookPhase":"Running","kind":"PodDisruptionBudget","message":"poddisruptionbudget.policy/vault configured","name":"vault","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"ServiceAccount","message":"serviceaccount/vault-agent-injector unchanged","name":"vault-agent-injector","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"ServiceAccount","message":"serviceaccount/vault unchanged","name":"vault","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"ConfigMap","message":"configmap/vault-config unchanged","name":"vault-config","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"rbac.authorization.k8s.io","hookPhase":"Running","kind":"ClusterRole","message":"clusterrole.rbac.authorization.k8s.io/vault-agent-injector-clusterrole reconciled. clusterrole.rbac.authorization.k8s.io/vault-agent-injector-clusterrole unchanged","name":"vault-agent-injector-clusterrole","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"rbac.authorization.k8s.io","hookPhase":"Running","kind":"ClusterRoleBinding","message":"clusterrolebinding.rbac.authorization.k8s.io/vault-server-binding reconciled. clusterrolebinding.rbac.authorization.k8s.io/vault-server-binding unchanged","name":"vault-server-binding","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"rbac.authorization.k8s.io","hookPhase":"Running","kind":"ClusterRoleBinding","message":"clusterrolebinding.rbac.authorization.k8s.io/vault-agent-injector-binding reconciled. clusterrolebinding.rbac.authorization.k8s.io/vault-agent-injector-binding unchanged","name":"vault-agent-injector-binding","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"rbac.authorization.k8s.io","hookPhase":"Running","kind":"Role","message":"role.rbac.authorization.k8s.io/vault-discovery-role reconciled. role.rbac.authorization.k8s.io/vault-discovery-role unchanged","name":"vault-discovery-role","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"rbac.authorization.k8s.io","hookPhase":"Running","kind":"RoleBinding","message":"rolebinding.rbac.authorization.k8s.io/vault-discovery-rolebinding reconciled. rolebinding.rbac.authorization.k8s.io/vault-discovery-rolebinding unchanged","name":"vault-discovery-rolebinding","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"Service","message":"service/vault-standby unchanged","name":"vault-standby","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"Service","message":"service/vault-active unchanged","name":"vault-active","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"Service","message":"service/vault-internal unchanged","name":"vault-internal","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"Service","message":"service/vault-agent-injector-svc unchanged","name":"vault-agent-injector-svc","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"","hookPhase":"Running","kind":"Service","message":"service/vault unchanged","name":"vault","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"apps","hookPhase":"Running","kind":"Deployment","message":"deployment.apps/vault-agent-injector configured","name":"vault-agent-injector","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"apps","hookPhase":"Running","kind":"StatefulSet","message":"statefulset.apps/vault configured","name":"vault","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"},{"group":"admissionregistration.k8s.io","hookPhase":"Running","kind":"MutatingWebhookConfiguration","message":"mutatingwebhookconfiguration.admissionregistration.k8s.io/vault-agent-injector-cfg configured","name":"vault-agent-injector-cfg","namespace":"vault","status":"Synced","syncPhase":"Sync","version":"v1"}],"revision":"ea003db2768a9cadc1e8a6ca0c9f6368a165243a","source":{"helm":{"valueFiles":["values.yaml"]},"path":"vault","repoURL":"https://git.co-work.ru/cw-devops/cw-infra-apps.git","targetRevision":"main"}}},"reconciledAt":"2025-03-19T13:55:34Z","resources":[{"kind":"ConfigMap","name":"vault-config","namespace":"vault","status":"Synced","version":"v1"},{"health":{"status":"Healthy"},"kind":"Service","name":"vault","namespace":"vault","status":"Synced","version":"v1"},{"health":{"status":"Healthy"},"kind":"Service","name":"vault-active","namespace":"vault","status":"Synced","version":"v1"},{"health":{"status":"Healthy"},"kind":"Service","name":"vault-agent-injector-svc","namespace":"vault","status":"Synced","version":"v1"},{"health":{"status":"Healthy"},"kind":"Service","name":"vault-internal","namespace":"vault","status":"Synced","version":"v1"},{"health":{"status":"Healthy"},"kind":"Service","name":"vault-standby","namespace":"vault","status":"Synced","version":"v1"},{"kind":"ServiceAccount","name":"vault","namespace":"vault","status":"Synced","version":"v1"},{"kind":"ServiceAccount","name":"vault-agent-injector","namespace":"vault","status":"Synced","version":"v1"},{"group":"admissionregistration.k8s.io","kind":"MutatingWebhookConfiguration","name":"vault-agent-injector-cfg","status":"Synced","version":"v1"},{"group":"apps","health":{"status":"Healthy"},"kind":"Deployment","name":"vault-agent-injector","namespace":"vault","status":"Synced","version":"v1"},{"group":"apps","health":{"message":"statefulset has 3 ready pods","status":"Healthy"},"kind":"StatefulSet","name":"vault","namespace":"vault","status":"Synced","version":"v1"},{"group":"policy","kind":"PodDisruptionBudget","name":"vault","namespace":"vault","status":"Synced","version":"v1"},{"group":"rbac.authorization.k8s.io","kind":"ClusterRole","name":"vault-agent-injector-clusterrole","status":"Synced","version":"v1"},{"group":"rbac.authorization.k8s.io","kind":"ClusterRoleBinding","name":"vault-agent-injector-binding","status":"Synced","version":"v1"},{"group":"rbac.authorization.k8s.io","kind":"ClusterRoleBinding","name":"vault-server-binding","status":"Synced","version":"v1"},{"group":"rbac.authorization.k8s.io","kind":"Role","name":"vault-discovery-role","namespace":"vault","status":"Synced","version":"v1"},{"group":"rbac.authorization.k8s.io","kind":"RoleBinding","name":"vault-discovery-rolebinding","namespace":"vault","status":"Synced","version":"v1"}],"sourceType":"Helm","summary":{"images":["hashicorp/vault-k8s:1.6.2","hashicorp/vault:1.19.0"]},"sync":{"comparedTo":{"destination":{"namespace":"vault","server":"https://kubernetes.default.svc"},"ignoreDifferences":[{"group":"admissionregistration.k8s.io","jsonPointers":["/webhooks/0/clientConfig/caBundle"],"kind":"MutatingWebhookConfiguration","name":"vault-agent-injector-cfg"}],"source":{"helm":{"valueFiles":["values.yaml"]},"path":"vault","repoURL":"https://git.co-work.ru/cw-devops/cw-infra-apps.git","targetRevision":"main"}},"revision":"ea003db2768a9cadc1e8a6ca0c9f6368a165243a","status":"Synced"}}}
creationTimestamp: "2025-03-19T14:00:58Z"
generation: 76
labels:
app.kubernetes.io/instance: argo-infra-apps
name: vault
namespace: argocd
resourceVersion: "441729"
uid: 495b57f6-384a-4a4e-b976-514011af6c45
spec:
destination:
namespace: client3
server: https://kubernetes.default.svc
ignoreDifferences:
- group: admissionregistration.k8s.io
jsonPointers:
- /webhooks/0/clientConfig/caBundle
kind: MutatingWebhookConfiguration
name: vault-agent-injector-cfg
project: default
source:
helm:
valueFiles:
- values.yaml
path: vault
repoURL: https://git.co-work.ru/devops/cw-infra-apps.git
targetRevision: client3
syncPolicy:
automated:
prune: true
selfHeal: true
syncOptions:
- CreateNamespace=true
status:
controllerNamespace: argocd
health:
status: Healthy
history:
- deployStartedAt: "2025-03-19T10:57:06Z"
deployedAt: "2025-03-19T10:57:07Z"
id: 0
initiatedBy:
automated: true
revision: ea003db2768a9cadc1e8a6ca0c9f6368a165243a
source:
helm:
valueFiles:
- values.yaml
path: vault
repoURL: https://git.co-work.ru/devops/cw-infra-apps.git
targetRevision: client-3
- deployStartedAt: "2025-03-19T11:32:51Z"
deployedAt: "2025-03-19T11:32:52Z"
id: 1
initiatedBy:
username: admin
revision: ea003db2768a9cadc1e8a6ca0c9f6368a165243a
source:
helm:
valueFiles:
- values.yaml
path: vault
repoURL: https://git.co-work.ru/devops/cw-infra-apps.git
targetRevision: client3
- deployStartedAt: "2025-03-19T14:01:01Z"
deployedAt: "2025-03-19T14:01:04Z"
id: 2
initiatedBy:
automated: true
revision: ccbcd028530e5528739ce1fd9d30fa1a835db178
source:
helm:
valueFiles:
- values.yaml
path: vault
repoURL: https://git.co-work.ru/devops/cw-infra-apps.git
targetRevision: client3
- deployStartedAt: "2025-03-19T14:11:37Z"
deployedAt: "2025-03-19T14:11:40Z"
id: 3
initiatedBy:
username: admin
revision: 170f1d93a41905281cbf22e6e4bd394d1fd57b7f
source:
helm:
valueFiles:
- values.yaml
path: vault
repoURL: https://git.co-work.ru/devops/cw-infra-apps.git
targetRevision: client3
operationState:
finishedAt: "2025-03-19T14:11:40Z"
message: successfully synced (all tasks run)
operation:
initiatedBy:
username: admin
retry: {}
sync:
prune: true
revision: 170f1d93a41905281cbf22e6e4bd394d1fd57b7f
syncOptions:
- CreateNamespace=true
- Replace=true
syncStrategy:
hook:
force: true
phase: Succeeded
startedAt: "2025-03-19T14:11:37Z"
syncResult:
resources:
- group: policy
hookPhase: Running
kind: PodDisruptionBudget
message: |-
poddisruptionbudget.policy "vault" deleted
poddisruptionbudget.policy/vault replaced
name: vault
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: ""
hookPhase: Running
kind: ServiceAccount
message: |-
serviceaccount "vault-agent-injector" deleted
serviceaccount/vault-agent-injector replaced
name: vault-agent-injector
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: ""
hookPhase: Running
kind: ServiceAccount
message: |-
serviceaccount "vault" deleted
serviceaccount/vault replaced
name: vault
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: ""
hookPhase: Running
kind: ConfigMap
message: |-
configmap "vault-config" deleted
configmap/vault-config replaced
name: vault-config
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: rbac.authorization.k8s.io
hookPhase: Running
kind: ClusterRole
message: |-
clusterrole.rbac.authorization.k8s.io/vault-agent-injector-clusterrole reconciled. clusterrole.rbac.authorization.k8s.io "vault-agent-injector-clusterrole" deleted
clusterrole.rbac.authorization.k8s.io/vault-agent-injector-clusterrole replaced
name: vault-agent-injector-clusterrole
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: rbac.authorization.k8s.io
hookPhase: Running
kind: ClusterRoleBinding
message: |-
clusterrolebinding.rbac.authorization.k8s.io/vault-server-binding reconciled. clusterrolebinding.rbac.authorization.k8s.io "vault-server-binding" deleted
clusterrolebinding.rbac.authorization.k8s.io/vault-server-binding replaced
name: vault-server-binding
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: rbac.authorization.k8s.io
hookPhase: Running
kind: ClusterRoleBinding
message: |-
clusterrolebinding.rbac.authorization.k8s.io/vault-agent-injector-binding reconciled. clusterrolebinding.rbac.authorization.k8s.io "vault-agent-injector-binding" deleted
clusterrolebinding.rbac.authorization.k8s.io/vault-agent-injector-binding replaced
name: vault-agent-injector-binding
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: rbac.authorization.k8s.io
hookPhase: Running
kind: Role
message: |-
role.rbac.authorization.k8s.io/vault-discovery-role reconciled. role.rbac.authorization.k8s.io "vault-discovery-role" deleted
role.rbac.authorization.k8s.io/vault-discovery-role replaced
name: vault-discovery-role
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: rbac.authorization.k8s.io
hookPhase: Running
kind: RoleBinding
message: |-
rolebinding.rbac.authorization.k8s.io/vault-discovery-rolebinding reconciled. rolebinding.rbac.authorization.k8s.io "vault-discovery-rolebinding" deleted
rolebinding.rbac.authorization.k8s.io/vault-discovery-rolebinding replaced
name: vault-discovery-rolebinding
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: ""
hookPhase: Running
kind: Service
message: |-
service "vault-internal" deleted
service/vault-internal replaced
name: vault-internal
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: ""
hookPhase: Running
kind: Service
message: |-
service "vault-agent-injector-svc" deleted
service/vault-agent-injector-svc replaced
name: vault-agent-injector-svc
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: ""
hookPhase: Running
kind: Service
message: |-
service "vault-standby" deleted
service/vault-standby replaced
name: vault-standby
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: ""
hookPhase: Running
kind: Service
message: |-
service "vault" deleted
service/vault replaced
name: vault
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: ""
hookPhase: Running
kind: Service
message: |-
service "vault-active" deleted
service/vault-active replaced
name: vault-active
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: apps
hookPhase: Running
kind: Deployment
message: |-
deployment.apps "vault-agent-injector" deleted
deployment.apps/vault-agent-injector replaced
name: vault-agent-injector
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: apps
hookPhase: Running
kind: StatefulSet
message: |-
statefulset.apps "vault" deleted
statefulset.apps/vault replaced
name: vault
namespace: client3
status: Synced
syncPhase: Sync
version: v1
- group: admissionregistration.k8s.io
hookPhase: Running
kind: MutatingWebhookConfiguration
message: |-
mutatingwebhookconfiguration.admissionregistration.k8s.io "vault-agent-injector-cfg" deleted
mutatingwebhookconfiguration.admissionregistration.k8s.io/vault-agent-injector-cfg replaced
name: vault-agent-injector-cfg
namespace: client3
status: Synced
syncPhase: Sync
version: v1
revision: 170f1d93a41905281cbf22e6e4bd394d1fd57b7f
source:
helm:
valueFiles:
- values.yaml
path: vault
repoURL: https://git.co-work.ru/devops/cw-infra-apps.git
targetRevision: client3
reconciledAt: "2025-03-19T15:31:34Z"
resources:
- kind: ConfigMap
name: vault-config
namespace: client3
status: Synced
version: v1
- health:
status: Healthy
kind: Service
name: vault
namespace: client3
status: Synced
version: v1
- health:
status: Healthy
kind: Service
name: vault-active
namespace: client3
status: Synced
version: v1
- health:
status: Healthy
kind: Service
name: vault-agent-injector-svc
namespace: client3
status: Synced
version: v1
- health:
status: Healthy
kind: Service
name: vault-internal
namespace: client3
status: Synced
version: v1
- health:
status: Healthy
kind: Service
name: vault-standby
namespace: client3
status: Synced
version: v1
- kind: ServiceAccount
name: vault
namespace: client3
status: Synced
version: v1
- kind: ServiceAccount
name: vault-agent-injector
namespace: client3
status: Synced
version: v1
- group: admissionregistration.k8s.io
kind: MutatingWebhookConfiguration
name: vault-agent-injector-cfg
status: Synced
version: v1
- group: apps
health:
status: Healthy
kind: Deployment
name: vault-agent-injector
namespace: client3
status: Synced
version: v1
- group: apps
health:
message: statefulset has 3 ready pods
status: Healthy
kind: StatefulSet
name: vault
namespace: client3
status: Synced
version: v1
- group: policy
kind: PodDisruptionBudget
name: vault
namespace: client3
status: Synced
version: v1
- group: rbac.authorization.k8s.io
kind: ClusterRole
name: vault-agent-injector-clusterrole
status: Synced
version: v1
- group: rbac.authorization.k8s.io
kind: ClusterRoleBinding
name: vault-agent-injector-binding
status: Synced
version: v1
- group: rbac.authorization.k8s.io
kind: ClusterRoleBinding
name: vault-server-binding
status: Synced
version: v1
- group: rbac.authorization.k8s.io
kind: Role
name: vault-discovery-role
namespace: client3
status: Synced
version: v1
- group: rbac.authorization.k8s.io
kind: RoleBinding
name: vault-discovery-rolebinding
namespace: client3
status: Synced
version: v1
sourceType: Helm
summary:
images:
- hashicorp/vault-k8s:1.6.2
- hashicorp/vault:1.19.0
sync:
comparedTo:
destination:
namespace: client3
server: https://kubernetes.default.svc
ignoreDifferences:
- group: admissionregistration.k8s.io
jsonPointers:
- /webhooks/0/clientConfig/caBundle
kind: MutatingWebhookConfiguration
name: vault-agent-injector-cfg
source:
helm:
valueFiles:
- values.yaml
path: vault
repoURL: https://git.co-work.ru/cw-devops/cw-infra-apps.git
targetRevision: main
revision: 51a8196fc681a3e098bb86eb1f2dd0889bfab910
status: Synced