community-catalog/templates/vault/0/docker-compose.yml.tpl

39 lines
1.1 KiB
Smarty
Executable File

version: '2'
volumes:
vault-config:
driver: ${VOLUME_DRIVER}
vault-file:
driver: ${VOLUME_DRIVER}
services:
vault-lb:
image: rancher/lb-service-haproxy:v0.9.1
ports:
- ${VAULT_LISTEN_PORT}:8200/tcp
- ${VAULT_CLUSTER_PORT}:8201/tcp
labels:
{{- if .Values.HOST_LABEL }}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end }}
io.rancher.container.agent.role: environmentAdmin,agent
io.rancher.container.agent_service.drain_provider: 'true'
io.rancher.container.create_agent: 'true'
vault:
cap_add:
- IPC_LOCK
image: vault:0.9.6
environment:
VAULT_REDIRECT_INTERFACE: "eth0"
VAULT_CLUSTER_INTERFACE: "eth0"
VAULT_LOCAL_CONFIG: |
{ "backend": "{{.Values.VAULT_BACKEND}}": { {{.Values.BACKEND_CONFIGURATION}} },"listener":{"tcp":{"address":"0.0.0.0:8200","tls_disable":1}}, "cluster_name":"{{.Values.VAULT_CLUSTER_NAME}}" }
{{- if .Values.VAULT_BACKEND }}
external_links:
- ${VAULT_BACKEND}:SERVICE
{{- end }}
volumes:
- vault-file:/vault/file
- vault-config:/vault/config
command:
- server