Update apps/vault/deployment.yaml

apps/vault/deployment.yaml

@@ -13,21 +13,27 @@ spec:
       labels:
         app: vault
     spec:
+      securityContext:
+        fsGroup: 1000
       containers:
-        - name: vault
+      - name: vault
-          image: hashicorp/vault:1.17
+        image: hashicorp/vault:1.16
-          args:
+        args:
-            - "server"
+          - "server"
-          env:
+          - "-config=/vault/config/vault.hcl"
-            - name: VAULT_LOCAL_CONFIG
+        securityContext:
-              value: |
+          runAsUser: 0
-                {"backend": {"file": {"path": "/vault/file"}}, "listener": {"tcp": {"address": "0.0.0.0:8200", "tls_disable": 1}}, "ui": true}
+          capabilities:
-          ports:
+            add:
-            - containerPort: 8200
+              - IPC_LOCK
-          volumeMounts:
+        ports:
-            - name: vault-data
+        - containerPort: 8200
-              mountPath: /vault/file
+        - containerPort: 8201
+        volumeMounts:
+        - name: config
+          mountPath: /vault/config
       volumes:
-        - name: vault-data
+      - name: config
-          persistentVolumeClaim:
+        configMap:
-            claimName: vault-data
+          name: vault-config
+