update vault helm

Signed-off-by: Song Song Li <[email protected]>

clusters/private-cloud/vault/README.md

@@ -0,0 +1,7 @@
+```
+kubectl port-forward svc/vault 8200:8200
+
+export VAULT_ADDR='http://127.0.0.1:8200'
+vault operator init
+vault operator unseal
+```

clusters/private-cloud/vault/vault.yaml

@@ -22,10 +22,3 @@ spec:
         name: hashicorp
         namespace: flux-system
   # https://github.com/hashicorp/vault-helm/blob/main/values.yaml
-  values:
-    server:
-      enabled: false
-    injector:
-      enabled: false
-    csi:
-      enabled: true

doc/plan.md

@@ -26,8 +26,8 @@
 - [ ] add redis
 - [x] add vault
 - [ ] use vault for k8s secret: https://www.hashicorp.com/blog/manage-kubernetes-secrets-for-flux-with-hashicorp-vault
-- [x] add test for vault
-- [ ] add test for external-secrets
+- [ ] add test for vault
+- [x] add test for external-secrets
 - [ ] use vault in ansible
 - [x] add external-secrets: https://github.com/external-secrets/external-secrets
 - [ ] use external-secrets with vault

test/deployment-test.sh

@@ -85,6 +85,10 @@ kubectl wait --timeout 300s --for=condition=available -n minio \
     || exit 1
 
 flux reconcile helmrelease vault
+kubectl wait --timeout 300s --for=condition=available -n vault \
+    deployment/vault-agent-injector \
+    || exit 1
+
 kubectl get daemonsets vault-csi-provider -n vault -o jsonpath='{.status.numberReady}' \
     | grep 2 \
     || exit 1