apiVersion: v1
kind: ConfigMap
metadata:
  name: vault-config
  namespace: vault
data:
  vault.hcl: |
    ui = true
    disable_mlock = true

    listener "tcp" {
      address     = "0.0.0.0:8200"
      tls_disable = 1
    }

    api_addr     = "http://vault.vault.svc:8200"
    cluster_addr = "https://vault.vault.svc:8201"

    storage "raft" {
      path = "/vault/data"
      node_id = "vault-1"
    }