README.md

Vault Secrets Operator

Value	Description	Default
replicaCount	Number of replications which should be created.	1
deploymentStrategy	Deployment strategy which should be used.	{}
image.repository	The repository of the Docker image.	ricoberger/vault-secrets-operator
image.tag	The tag of the Docker image which should be used.	1.14.3
image.pullPolicy	The pull policy for the Docker image,	IfNotPresent
image.volumeMounts	Mount additional volumns to the container.	[]
imagePullSecrets	Secrets which can be used to pull the Docker image.	[]
nameOverride	Expand the name of the chart.	""
fullnameOverride	Override the name of the app.	""
environmentVars	Pass environment variables from a secret to the containers. This must be used if you use the Token auth method of Vault.	[]
vault.address	The address where Vault listen on (e.g. http://vault.example.com).	"http://vault:8200"
vault.authMethod	The authentication method, which should be used by the operator. Can by token (Token auth method), kubernetes (Kubernetes auth method), or approle (AppRole auth method).	token
vault.tokenPath	Path to file with the Vault token if the used auth method is token. Can be used to read the token from a file and not from the VAULT_TOKEN environment variable.	""
vault.kubernetesPath	If the Kubernetes auth method is used, this is the path where the Kubernetes auth method is enabled.	auth/kubernetes
vault.kubernetesRole	The name of the role which is configured for the Kubernetes auth method.	vault-secrets-operator
vault.appRolePath	If the AppRole auth method is used, this is the path where the AppRole auth method is enabled.	auth/approle
vault.reconciliationTime	The time after which the reconcile function for the CR is rerun. If the value is 0, automatic reconciliation is skipped.	0
vault.namespaces	Comma serpareted list of namespaces the operator will watch. If empty the operator will watch all namespaces.	""
crd.create	Create the custom resource definition.	true
rbac.create	Create RBAC object, enable (Cluster)Role and (Cluster)Role binding creation.	true
rbac.createrole	Finetune RBAC, enable or disable (Cluster)Role creation. NOTE: ignored when rbac.create is not true.	true
rbac.namespaced	Deploy in isolated namespace. Creates RoleBinding instead of a ClusterRoleBinding	false
serviceAccount.create	Create the service account.	true
serviceAccount.name	The name of the service account, which should be created/used by the operator.	vault-secrets-operator
podAnnotations	Annotations for vault-secrets-operator pod(s).	{}
podSecurityContext:	Security context policies to add to the operator pod.	{}
securityContext:	Security context policies to add to the containers.	{}
podLabels	Additional labels for the vault-secrets-operator pod(s).	{}
testPodAnnotations	Annotations for vault-secrets-operator-test-connection pod.	{}
testPodLabels	Additional labels for the vault-secrets-operator-test-connection pod.	{}
resources	Set resources for the operator.	{}
volumes	Provide additional volumns for the container.	[]
nodeSelector	Set a node selector.	{}
tolerations	Set tolerations.	[]
serviceMonitor.enabled	Enable the creation of a ServiceMonitor for the Prometheus Operator.	false
serviceMonitor.labels	Additional labels which should be set for the ServiceMonitor.	{}
serviceMonitor.interval	Scrape interval.	10s
serviceMonitor.scrapeTimeout	Scrape timeout.	10s
serviceMonitor.honorLabels	Honor labels option.	true
serviceMonitor.relabelings	Additional relabeling config for the ServiceMonitor.	[]
priorityClassName	Optionally attach priority class to pod spec.	null