SmokyZoneandCopilot 5ef5aaa0d8 Terminate TLS on OpenBao with a cert-manager self-signed certificate ...

Adds a ClusterIssuer (selfSigned) + Certificate, mounts the resulting
secret into the OpenBao pod, and switches the listener config from
tls_disable=1 to a TLS-enabled listener. UI/API is now served over
https://<node-ip>:30200 instead of plain HTTP.

Also updates ClusterSecretStore/bootstrap Job to use https + trust the
self-signed cert via caProvider/BAO_SKIP_VERIFY.

Co-authored-by: Copilot <[email protected]>

2026-09-18 20:20:20 +02:00

..

_helpers.tpl

Fix service name resolution for OpenBao (release name collision)

2026-09-18 20:06:11 +02:00

bootstrap-job.yaml

Terminate TLS on OpenBao with a cert-manager self-signed certificate

2026-09-18 20:20:20 +02:00

clustersecretstore.yaml

Terminate TLS on OpenBao with a cert-manager self-signed certificate

2026-09-18 20:20:20 +02:00

tls.yaml

Terminate TLS on OpenBao with a cert-manager self-signed certificate

2026-09-18 20:20:20 +02:00