diff --git a/apps/vault/vault-config.yaml b/apps/vault/vault-config.yaml
new file mode 100644
index 0000000..ad9e564
--- /dev/null
+++ b/apps/vault/vault-config.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: vault-config
+  namespace: vault
+data:
+  vault.hcl: |
+    ui = true
+    disable_mlock = true
+
+    listener "tcp" {
+      address     = "0.0.0.0:8200"
+      tls_disable = 1
+    }
+
+    api_addr     = "http://vault.vault.svc:8200"
+    cluster_addr = "https://vault.vault.svc:8201"