Need to increase replicas for vault-configurer pods

[kapil7148]

Hi Team,
I am using helm chart for vault-operator, after deploying helm chart , i am getting vault, vault-operator and vault-configurer pods , i need to increase replicas for vault-configurer pods how to do that ? Can someone provide me the code here , like anything need to add in crd or anything ,

[kapil7148]

@sagikazarmark , @ramizpolic could you please help here ?

[akijakya]

Hi @kapil7148, there is currently no way of my knowing to increase the replicas of the configurer via configuration, only manually by editing the already existing deployment. Although I don't really see the reason for it, I think for what it is doing, 1 pod should be enough!

[kapil7148]

Hi, basically what is use of vault-configurer pods ?

[ramizpolic]

The configurer ensures that Vault instance is in predefined state based on the provided configuration. The configurer params can be found at https://bank-vaults.dev/docs/external-configuration/.
The reason we have a single Pod is to ensure that we are not issuing multiple control ops which otherwise might create additional issues with ensuring the state consistency of Vault.
I would advise to review your current use-case and decide if increasing the configurer pods is actually necessary.

[kapil7148]

Thanks @ramizpolic @akijakya
Just wanted to know is it ok to have 3 pods for vault, vault-secret-webhook and vault-operator and 1 pod for vault-configurer in production?

[akijakya]

I think for the operator and configurer 1-1 pod should be enough, for Vault it makes sense to have 3 (see also in the docs) and for the webhook as well (depends on the number of workloads you would like to inject secrets into).