vault-k8s

Vault

  • Canonical Telco
Channel Revision Published Runs on
latest/edge 89 31 Jan 2024
Ubuntu 22.04 Ubuntu 20.04
latest/edge 9 27 Jan 2023
Ubuntu 22.04 Ubuntu 20.04
1.16/stable 323 20 Jan 2025
Ubuntu 22.04
1.16/candidate 323 20 Jan 2025
Ubuntu 22.04
1.16/beta 323 20 Jan 2025
Ubuntu 22.04
1.16/edge 326 20 Jan 2025
Ubuntu 22.04
1.15/stable 248 24 Jul 2024
Ubuntu 22.04
1.15/candidate 248 24 Jul 2024
Ubuntu 22.04
1.15/beta 248 24 Jul 2024
Ubuntu 22.04
1.15/edge 248 10 Jul 2024
Ubuntu 22.04
juju deploy vault-k8s --channel 1.16/stable
Show information

Platform:

charms.vault_k8s.v0.vault_helpers

This library contains helper function used when configuring the Vault service.


def common_name_config_is_valid(common_name: str)

Description

Return whether the config value for the common name is valid. None

def render_vault_config_file(
    config_template_path: str,
    config_template_name: str,
    default_lease_ttl: str,
    max_lease_ttl: str,
    cluster_address: str,
    api_address: str,
    tls_cert_file: str,
    tls_key_file: str,
    tcp_address: str,
    raft_storage_path: str,
    node_id: str,
    retry_joins,
    autounseal_details
)

Description

Render the Vault config file. None

def seal_type_has_changed(
    content_a: str,
    content_b: str
)

Check if the seal type has changed between two versions of the Vault configuration file.

Description

Currently only checks if the transit stanza is present or not, since this is all we support. This function will need to be extended to support alternate cases if and when we support them.

def config_file_content_matches(
    existing_content: str,
    new_content: str
)

Return whether two Vault config file contents match.

Returns

Whether the vault config file content matches

Description

We check if the retry_join addresses match, and then we check if the rest of the config file matches.