Merge pull request #131 from tanmay-pnaik/chore/vault-1.14.1

chore: Update to `hashicorp/vault:1.14.1`
bank-vaults · Jul 26, 2023 · 13ff470 · 13ff470
2 parents be6bef8 + f7395ce
commit 13ff470
Show file tree

Hide file tree

Showing 47 changed files with 48 additions and 48 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -211,7 +211,7 @@ jobs:
     strategy:
       matrix:
         k8s_version: ["v1.24.15", "v1.25.11", "v1.26.6", "v1.27.3"]
-        vault_version: ["1.11.12", "1.12.8", "1.13.4", "1.14.0"]
+        vault_version: ["1.11.12", "1.12.8", "1.13.4", "1.14.1"]
 
     steps:
       - name: Checkout repository

diff --git a/Makefile b/Makefile
@@ -5,7 +5,7 @@ IMG ?= ghcr.io/bank-vaults/vault-operator:dev
 
 # Default test data
 TEST_K8S_VERSION ?= 1.27.1
-TEST_VAULT_VERSION ?= 1.14.0
+TEST_VAULT_VERSION ?= 1.14.1
 TEST_BANK_VAULTS_VERSION ?= 1.19.0
 TEST_BANK_VAULTS_IMAGE ?= ghcr.io/banzaicloud/bank-vaults:$(TEST_BANK_VAULTS_VERSION)
 TEST_OPERATOR_VERSION ?= $(lastword $(subst :, ,$(IMG)))

diff --git a/deploy/dev/microk8s/dev.yaml b/deploy/dev/microk8s/dev.yaml
@@ -4,7 +4,7 @@ metadata:
   name: vault-dev
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
   bankVaultsImage: ghcr.io/banzaicloud/bank-vaults:<branch_name>
 
   # Common annotations for all created resources

diff --git a/deploy/dev/multi-dc/aws/cr-primary.yaml b/deploy/dev/multi-dc/aws/cr-primary.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault-primary"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Specify the ServiceAccount where the Vault Pod and the Bank-Vaults configurer/unsealer is running
   serviceAccount: vault

diff --git a/deploy/dev/multi-dc/aws/cr-secondary.yaml b/deploy/dev/multi-dc/aws/cr-secondary.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault-secondary"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Specify the ServiceAccount where the Vault Pod and the Bank-Vaults configurer/unsealer is running
   serviceAccount: vault

diff --git a/deploy/dev/multi-dc/aws/cr-tertiary.yaml b/deploy/dev/multi-dc/aws/cr-tertiary.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault-tertiary"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Specify the ServiceAccount where the Vault Pod and the Bank-Vaults configurer/unsealer is running
   serviceAccount: vault

diff --git a/deploy/dev/multi-dc/test/cr-primary.yaml b/deploy/dev/multi-dc/test/cr-primary.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault-primary"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Specify the ServiceAccount where the Vault Pod and the Bank-Vaults configurer/unsealer is running
   serviceAccount: vault

diff --git a/deploy/dev/multi-dc/test/cr-secondary.yaml b/deploy/dev/multi-dc/test/cr-secondary.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault-secondary"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Specify the ServiceAccount where the Vault Pod and the Bank-Vaults configurer/unsealer is running
   serviceAccount: vault

diff --git a/deploy/dev/multi-dc/test/cr-tertiary.yaml b/deploy/dev/multi-dc/test/cr-tertiary.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault-tertiary"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Specify the ServiceAccount where the Vault Pod and the Bank-Vaults configurer/unsealer is running
   serviceAccount: vault

diff --git a/deploy/dev/multi-dc/test/multi-dc-raft.sh b/deploy/dev/multi-dc/test/multi-dc-raft.sh
@@ -14,7 +14,7 @@ set -xeo pipefail
 #
 
 METALLB_VERSION=v0.13.10
-VAULT_VERSION=1.14.0
+VAULT_VERSION=1.14.1
 BANK_VAULTS_VERSION=1.19.0
 VAULT_TOKEN=$(uuidgen)
 export VAULT_TOKEN

diff --git a/deploy/examples/cr-alibaba.yaml b/deploy/examples/cr-alibaba.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Describe where you would like to store the Vault unseal keys and root token
   # in OSS encrypted with KMS.

diff --git a/deploy/examples/cr-audit.yaml b/deploy/examples/cr-audit.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Specify the ServiceAccount where the Vault Pod and the Bank-Vaults configurer/unsealer is running
   serviceAccount: vault

diff --git a/deploy/examples/cr-aws-server-side-encryption.yaml b/deploy/examples/cr-aws-server-side-encryption.yaml
@@ -57,7 +57,7 @@ spec:
             policies: ["allow_secrets", "allow_pki"]
             ttl: 1h
 
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # It's always a good idea to specify
   resources:

diff --git a/deploy/examples/cr-aws.yaml b/deploy/examples/cr-aws.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Instead of credentialsConfig one can use IAM instance profiles, or kube2iam for example:
   annotations:

diff --git a/deploy/examples/cr-awskms.yaml b/deploy/examples/cr-awskms.yaml
@@ -4,7 +4,7 @@ metadata:
   name: vault
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
   bankVaultsImage: ghcr.io/banzaicloud/bank-vaults:latest
 
   serviceAccount: vault

diff --git a/deploy/examples/cr-azure.yaml b/deploy/examples/cr-azure.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Describe where you would like to store the Vault unseal keys and root token
   # in Azure KeyVault.

diff --git a/deploy/examples/cr-cert-manager.yaml b/deploy/examples/cr-cert-manager.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
   bankVaultsImage: ghcr.io/banzaicloud/bank-vaults:latest
 
   # Specify the ServiceAccount where the Vault Pod and the Bank-Vaults configurer/unsealer is running

diff --git a/deploy/examples/cr-containers.yaml b/deploy/examples/cr-containers.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
   # specify a custom bank-vaults image with bankVaultsImage:
   # bankVaultsImage: ghcr.io/banzaicloud/bank-vaults:latest
 

diff --git a/deploy/examples/cr-credentialFromSecret.yaml b/deploy/examples/cr-credentialFromSecret.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Common annotations for all created resources
   annotations:

diff --git a/deploy/examples/cr-customports.yaml b/deploy/examples/cr-customports.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Common annotations for all created resources
   annotations:

diff --git a/deploy/examples/cr-disabled-root-token-storage.yaml b/deploy/examples/cr-disabled-root-token-storage.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
   # specify a custom bank-vaults image with bankVaultsImage:
   # bankVaultsImage: ghcr.io/banzaicloud/bank-vaults:latest
 

diff --git a/deploy/examples/cr-file.yaml b/deploy/examples/cr-file.yaml
@@ -4,7 +4,7 @@ metadata:
   name: vault
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
   bankVaultsImage: ghcr.io/banzaicloud/bank-vaults:latest
 
   serviceAccount: vault

diff --git a/deploy/examples/cr-gcpkms.yaml b/deploy/examples/cr-gcpkms.yaml
@@ -4,7 +4,7 @@ metadata:
   name: vault
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
   bankVaultsImage: ghcr.io/banzaicloud/bank-vaults:latest
 
   serviceAccount: vault

diff --git a/deploy/examples/cr-gcs-ha-autounseal.yaml b/deploy/examples/cr-gcs-ha-autounseal.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 2
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Describe where you would like to store the Vault unseal keys and root token
   # in GCS encrypted with KMS.

diff --git a/deploy/examples/cr-gcs-ha.yaml b/deploy/examples/cr-gcs-ha.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 2
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Describe where you would like to store the Vault unseal keys and root token
   # in GCS encrypted with KMS.

diff --git a/deploy/examples/cr-hsm-nitrokey.yaml b/deploy/examples/cr-hsm-nitrokey.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Common annotations for all created resources
   annotations:

diff --git a/deploy/examples/cr-hsm-softhsm.yaml b/deploy/examples/cr-hsm-softhsm.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Common annotations for all created resources
   annotations:

diff --git a/deploy/examples/cr-init-containers.yaml b/deploy/examples/cr-init-containers.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Common annotations for all created resources
   annotations:

diff --git a/deploy/examples/cr-istio.yaml b/deploy/examples/cr-istio.yaml
@@ -4,7 +4,7 @@ metadata:
   name: vault
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
   bankVaultsImage: ghcr.io/banzaicloud/bank-vaults:latest
 
   # Common annotations for all created resources

diff --git a/deploy/examples/cr-k8s-startup-secret.yaml b/deploy/examples/cr-k8s-startup-secret.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Common annotations for all created resources
   annotations:

diff --git a/deploy/examples/cr-kvv2.yaml b/deploy/examples/cr-kvv2.yaml
@@ -4,7 +4,7 @@ metadata:
   name: vault
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Specify the Service's type where the Vault Service is exposed
   serviceType: ClusterIP

diff --git a/deploy/examples/cr-mysql-ha.yaml b/deploy/examples/cr-mysql-ha.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 2
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Specify the ServiceAccount where the Vault Pod and the Bank-Vaults configurer/unsealer is running
   serviceAccount: vault

diff --git a/deploy/examples/cr-nodeAffinity.yaml b/deploy/examples/cr-nodeAffinity.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 3
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # A YAML representation of nodeAffinity
   # Detail can reference: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity

diff --git a/deploy/examples/cr-oidc.yaml b/deploy/examples/cr-oidc.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Specify the ServiceAccount where the Vault Pod and the Bank-Vaults configurer/unsealer is running
   serviceAccount: vault

diff --git a/deploy/examples/cr-podAntiAffinity.yaml b/deploy/examples/cr-podAntiAffinity.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 3
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Set use which node label for pod anti-affinity. Prevent all vault put on same AZ.
   # Detail can reference: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity

diff --git a/deploy/examples/cr-policy-with-accessor.yaml b/deploy/examples/cr-policy-with-accessor.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Specify the ServiceAccount where the Vault Pod and the Bank-Vaults configurer/unsealer is running
   serviceAccount: vault

diff --git a/deploy/examples/cr-priority.yaml b/deploy/examples/cr-priority.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   vaultPodSpec:
     priorityClassName: high-priority

diff --git a/deploy/examples/cr-prometheus.yaml b/deploy/examples/cr-prometheus.yaml
@@ -11,7 +11,7 @@ metadata:
   name: "vault"
 spec:
   size: 2
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Specify the ServiceAccount where the Vault Pod and the Bank-Vaults configurer/unsealer is running
   serviceAccount: vault

diff --git a/deploy/examples/cr-raft-1.yaml b/deploy/examples/cr-raft-1.yaml
@@ -7,7 +7,7 @@ metadata:
     vault_cr: vault
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Common annotations for all created resources
   annotations:

diff --git a/deploy/examples/cr-raft-ha-storage.yaml b/deploy/examples/cr-raft-ha-storage.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 3
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
   bankVaultsImage: ghcr.io/banzaicloud/bank-vaults:latest
 
   # Schedule the pods on the same node, since we are using hostPath storage

diff --git a/deploy/examples/cr-raft.yaml b/deploy/examples/cr-raft.yaml
@@ -7,7 +7,7 @@ metadata:
     vault_cr: vault
 spec:
   size: 3
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Common annotations for all created resources
   annotations:

diff --git a/deploy/examples/cr-resource.yaml b/deploy/examples/cr-resource.yaml
@@ -4,7 +4,7 @@ metadata:
   name: "vault"
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   resources:
     # A YAML representation of resource ResourceRequirements for vault container

diff --git a/deploy/examples/cr-statsd.yaml b/deploy/examples/cr-statsd.yaml
@@ -4,7 +4,7 @@ metadata:
   name: vault
 spec:
   size: 1
-  image: hashicorp/vault:1.14.0
+  image: hashicorp/vault:1.14.1
 
   # Specify the Service's type where the Vault Service is exposed
   serviceType: ClusterIP