mirrors/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2025-11-25 12:41:10 +01:00
Code Issues Projects Releases Wiki Activity

Update injector docs for 0.6.0 (#10186)

Browse Source
This commit is contained in:
Jason O'Donnell 2020-10-20 13:09:37 -04:00 committed by GitHub
parent 29bd055ba9
commit db088227d0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
website/pages/docs/platform/k8s/injector/annotations.mdx
View File

@ -73,22 +73,30 @@ them, optional commands to run, etc.
`vault.hashicorp.com/agent-inject-secret-foobar` is configured, `vault.hashicorp.com/agent-inject-secret-foobar` is configured,
`vault.hashicorp.com/agent-inject-file-foobar` would configure the filename. `vault.hashicorp.com/agent-inject-file-foobar` would configure the filename.
- `vault.hashicorp.com/agent-extra-secret` - mounts Kubernetes secret as a volume at
`/vault/custom` in the sidecar/init containers. Useful for custom Agent configs with
auto-auth methods such as approle that require paths to secrets be present.
- `vault.hashicorp.com/agent-inject-token` - configures Vault Agent to share the Vault - `vault.hashicorp.com/agent-inject-token` - configures Vault Agent to share the Vault
token with other containers in the pod. This is helpful when other containers token with other containers in the pod. This is helpful when other containers
communicate directly with Vault but require auto-authentication provided by Vault communicate directly with Vault but require auto-authentication provided by Vault
Agent. This should be set to a `true` or `false` value. Defaults to `false`. Agent. This should be set to a `true` or `false` value. Defaults to `false`.
- `vault.hashicorp.com/agent-limits-cpu` - configures the CPU limits on the Vault - `vault.hashicorp.com/agent-limits-cpu` - configures the CPU limits on the Vault
Agent containers. Defaults to `500m`. Agent containers. Defaults to `500m`. Setting this to an empty string disables
CPU limits.
- `vault.hashicorp.com/agent-limits-mem` - configures the memory limits on the Vault - `vault.hashicorp.com/agent-limits-mem` - configures the memory limits on the Vault
Agent containers. Defaults to `128Mi`. Agent containers. Defaults to `128Mi`. Setting this to an empty string disables
memory limits.
- `vault.hashicorp.com/agent-requests-cpu` - configures the CPU requests on the - `vault.hashicorp.com/agent-requests-cpu` - configures the CPU requests on the
Vault Agent containers. Defaults to `250m`. Vault Agent containers. Defaults to `250m`. Setting this to an empty string disables
CPU requests.
- `vault.hashicorp.com/agent-requests-mem` - configures the memory requests on the - `vault.hashicorp.com/agent-requests-mem` - configures the memory requests on the
Vault Agent containers. Defaults to `64Mi`. Vault Agent containers. Defaults to `64Mi`. Setting this to an empty string disables
memory requests.
- `vault.hashicorp.com/agent-revoke-on-shutdown` - configures whether the sidecar - `vault.hashicorp.com/agent-revoke-on-shutdown` - configures whether the sidecar
will revoke it's own token before shutting down. This setting will only be applied will revoke it's own token before shutting down. This setting will only be applied