# services/vault/configmap.yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: vault-config
  namespace: vault
data:
  local.hcl: |
    ui = true
    cluster_name = "vault-k8s"

    listener "tcp" {
      address         = "0.0.0.0:8200"
      cluster_address = "0.0.0.0:8201"
      tls_cert_file   = "/vault/userconfig/tls/tls.crt"
      tls_key_file    = "/vault/userconfig/tls/tls.key"
    }

    storage "raft" {
      path = "/vault/data"
    }

    api_addr     = "https://secret.bstein.dev"
    cluster_addr = "https://vault-0.vault-internal:8201"