From af3a99996045969248fc402d98f456123324f076 Mon Sep 17 00:00:00 2001 From: Petr Balogh Date: Fri, 1 Nov 2024 23:20:48 +0100 Subject: [PATCH] Add config ipi_3az_rhcos_3m_3w_3i_vault_v2_external_with_namespace Signed-off-by: Petr Balogh --- ...w_3i_vault_v2_external_with_namespace.yaml | 38 +++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 conf/deployment/aws/ipi_3az_rhcos_3m_3w_3i_vault_v2_external_with_namespace.yaml diff --git a/conf/deployment/aws/ipi_3az_rhcos_3m_3w_3i_vault_v2_external_with_namespace.yaml b/conf/deployment/aws/ipi_3az_rhcos_3m_3w_3i_vault_v2_external_with_namespace.yaml new file mode 100644 index 00000000000..0ea12ebc7ea --- /dev/null +++ b/conf/deployment/aws/ipi_3az_rhcos_3m_3w_3i_vault_v2_external_with_namespace.yaml @@ -0,0 +1,38 @@ +--- +DEPLOYMENT: + allow_lower_instance_requirements: false + kms_deployment: true + infra_nodes: true +ENV_DATA: + platform: 'aws' + deployment_type: 'ipi' + region: 'us-east-2' + worker_availability_zones: + - 'us-east-2a' + - 'us-east-2b' + - 'us-east-2c' + infra_availability_zones: + - 'us-east-2a' + - 'us-east-2b' + - 'us-east-2c' + master_availability_zones: + - 'us-east-2a' + - 'us-east-2b' + - 'us-east-2c' + worker_replicas: 3 + master_replicas: 3 + infra_replicas: 3 + worker_instance_type: 'm5.4xlarge' + encryption_at_rest: true + vault_deploy_mode: external + use_vault_namespace: true + KMS_PROVIDER: vault + KMS_SERVICE_NAME: vault + VAULT_AUTH_METHOD: token + VAULT_CACERT: "ocs-kms-ca-secret" + VAULT_CA_ONLY: true + VAULT_CLIENT_CERT: "ocs-kms-client-cert" + VAULT_CLIENT_KEY: "ocs-kms-client-key" + vault_hcp: true + VAULT_SKIP_VERIFY: false + VAULT_BACKEND: "v2"