quoted hashicorp vault values

Signed-off-by: Dustin Scott <sdustin@vmware.com>
vmware-tanzu-labs · Sep 3, 2021 · 8d8e00f · 8d8e00f
1 parent 65e67c5
commit 8d8e00f
Show file tree

Hide file tree

Showing 5 changed files with 52 additions and 52 deletions.
diff --git a/roles/components/core/secret-management/hashicorp-vault/templates/server-app.yaml.j2 b/roles/components/core/secret-management/hashicorp-vault/templates/server-app.yaml.j2
@@ -5,10 +5,10 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: hashicorp-vault
-  namespace: {{ tanzu_secrets.namespace }}
+  namespace: "{{ tanzu_secrets.namespace }}"
   labels:
     app.kubernetes.io/name: hashicorp-vault
-    app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
+    app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
     app.kubernetes.io/instance: hashicorp
 spec:
   serviceName: hashicorp-vault-internal
@@ -19,14 +19,14 @@ spec:
   selector:
     matchLabels:
       app.kubernetes.io/name: hashicorp-vault
-      app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
+      app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
       app.kubernetes.io/instance: hashicorp
       component: server
   template:
     metadata:
       labels:
         app.kubernetes.io/name: hashicorp-vault
-        app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
+        app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
         app.kubernetes.io/instance: hashicorp
         component: server
     spec:
@@ -36,12 +36,12 @@ spec:
             - labelSelector:
                 matchLabels:
                   app.kubernetes.io/name: hashicorp-vault
-                  app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
+                  app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
                   app.kubernetes.io/instance: "hashicorp"
                   component: server
               topologyKey: kubernetes.io/hostname
       terminationGracePeriodSeconds: 10
-      serviceAccountName: {{ tanzu_secrets.hashicorp_vault.resource_name }}
+      serviceAccountName: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
       securityContext:
         runAsNonRoot: true
         runAsGroup: 1000
@@ -50,15 +50,15 @@ spec:
       volumes:
         - name: config
           configMap:
-            name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
+            name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
         - name: home
           emptyDir: {}
         - name: init-script
           configMap:
-            name: {{ tanzu_secrets.hashicorp_vault.init_script }}
+            name: "{{ tanzu_secrets.hashicorp_vault.init_script }}"
             defaultMode: 0750
       containers:
-        - name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
+        - name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
           image: "{{ tanzu_secrets.hashicorp_vault.image }}:{{ tanzu_secrets.hashicorp_vault.image_tag }}"
           imagePullPolicy: IfNotPresent
           command:
@@ -167,9 +167,9 @@ apiVersion: v1
 kind: Service
 metadata:
   name: hashicorp-vault
-  namespace: {{ tanzu_secrets.namespace }}
+  namespace: "{{ tanzu_secrets.namespace }}"
   labels:
-    app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
+    app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
     app.kubernetes.io/instance: hashicorp
   annotations:
     service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
@@ -184,6 +184,6 @@ spec:
       port: 8201
       targetPort: 8201
   selector:
-    app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
+    app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
     app.kubernetes.io/instance: hashicorp
     component: server
diff --git a/roles/components/core/secret-management/hashicorp-vault/templates/server-config-job.yaml.j2 b/roles/components/core/secret-management/hashicorp-vault/templates/server-config-job.yaml.j2
@@ -4,27 +4,27 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: {{ tanzu_secrets.hashicorp_vault.config_job.vars_secret }}
-  namespace: {{ tanzu_secrets.namespace }}
+  name: "{{ tanzu_secrets.hashicorp_vault.config_job.vars_secret }}"
+  namespace: "{{ tanzu_secrets.namespace }}"
   labels:
-    app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.config_job.vars_secret }}
+    app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.config_job.vars_secret }}"
     app.kubernetes.io/instance: hashicorp
 data:
-  hashicorp_vault_namespace:      {{ tanzu_secrets.namespace | b64encode }}
-  hashicorp_vault_resource_name:  {{ tanzu_secrets.hashicorp_vault.resource_name | b64encode }}
-  hashicorp_vault_policy_name:    {{ tanzu_secrets.hashicorp_vault.policy_name | b64encode }}
-  hashicorp_vault_role_name:      {{ tanzu_secrets.hashicorp_vault.role_name | b64encode }}
-  hashicorp_vault_engine_name:    {{ tanzu_secrets.hashicorp_vault.engine_name | b64encode }}
-  hashicorp_vault_engine_backend: {{ tanzu_secrets.hashicorp_vault.engine_backend | b64encode }}
-  kubernetes_tcp_address:         {{ _kubernetes_tcp_address | b64encode }}
+  hashicorp_vault_namespace:      "{{ tanzu_secrets.namespace | b64encode }}"
+  hashicorp_vault_resource_name:  "{{ tanzu_secrets.hashicorp_vault.resource_name | b64encode }}"
+  hashicorp_vault_policy_name:    "{{ tanzu_secrets.hashicorp_vault.policy_name | b64encode }}"
+  hashicorp_vault_role_name:      "{{ tanzu_secrets.hashicorp_vault.role_name | b64encode }}"
+  hashicorp_vault_engine_name:    "{{ tanzu_secrets.hashicorp_vault.engine_name | b64encode }}"
+  hashicorp_vault_engine_backend: "{{ tanzu_secrets.hashicorp_vault.engine_backend | b64encode }}"
+  kubernetes_tcp_address:         "{{ _kubernetes_tcp_address | b64encode }}"
 ---
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: {{ tanzu_secrets.hashicorp_vault.config_job.playbook_config_map }}
-  namespace: {{ tanzu_secrets.namespace }}
+  name: "{{ tanzu_secrets.hashicorp_vault.config_job.playbook_config_map }}"
+  namespace: "{{ tanzu_secrets.namespace }}"
   labels:
-    app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.config_job.playbook_config_map }}
+    app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.config_job.playbook_config_map }}"
     app.kubernetes.io/instance: hashicorp
 data:
   site.yaml: |

diff --git a/roles/components/core/secret-management/hashicorp-vault/templates/server-config.yaml.j2 b/roles/components/core/secret-management/hashicorp-vault/templates/server-config.yaml.j2
@@ -4,10 +4,10 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
-  namespace: {{ tanzu_secrets.namespace }}
+  name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
+  namespace: "{{ tanzu_secrets.namespace }}"
   labels:
-    app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
+    app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
     app.kubernetes.io/instance: hashicorp
 data:
   extraconfig-from-values.hcl: |-
@@ -36,10 +36,10 @@ data:
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: {{ tanzu_secrets.hashicorp_vault.init_script }}
-  namespace: {{ tanzu_secrets.namespace }}
+  name: "{{ tanzu_secrets.hashicorp_vault.init_script }}"
+  namespace: "{{ tanzu_secrets.namespace }}"
   labels:
-    app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
+    app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
     app.kubernetes.io/instance: hashicorp
 data:
   init-script.sh: |

diff --git a/roles/components/core/secret-management/hashicorp-vault/templates/server-ingress.yaml.j2 b/roles/components/core/secret-management/hashicorp-vault/templates/server-ingress.yaml.j2
@@ -5,12 +5,12 @@ apiVersion: networking.k8s.io/v1beta1
 kind: Ingress
 metadata:
   name: hashicorp-vault
-  namespace: {{ tanzu_secrets.namespace }}
+  namespace: "{{ tanzu_secrets.namespace }}"
   annotations:
     external-dns.alpha.kubernetes.io/target: "{{ tanzu_ingress.dns }}"
 spec:
   rules:
-    - host: {{ tanzu_secrets.dns }}
+    - host: "{{ tanzu_secrets.dns }}"
       http:
         paths:
           - path: /

diff --git a/roles/components/core/secret-management/hashicorp-vault/templates/server-rbac.yaml.j2 b/roles/components/core/secret-management/hashicorp-vault/templates/server-rbac.yaml.j2
@@ -4,44 +4,44 @@
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
-  namespace: {{ tanzu_secrets.namespace }}
+  name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
+  namespace: "{{ tanzu_secrets.namespace }}"
   labels:
-    app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
+    app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
     app.kubernetes.io/instance: hashicorp
 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
-  name: {{ tanzu_secrets.hashicorp_vault.config_job.name }}
-  namespace: {{ tanzu_secrets.namespace }}
+  name: "{{ tanzu_secrets.hashicorp_vault.config_job.name }}"
+  namespace: "{{ tanzu_secrets.namespace }}"
   labels:
-    app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.config_job.name }}
+    app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.config_job.name }}"
     app.kubernetes.io/instance: hashicorp
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
-  name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
+  name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
   labels:
-    app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
+    app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
     app.kubernetes.io/instance: hashicorp
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: system:auth-delegator
 subjects:
   - kind: ServiceAccount
-    name: {{ tanzu_secrets.hashicorp_vault.resource_name }}
-    namespace: {{ tanzu_secrets.namespace }}
+    name: "{{ tanzu_secrets.hashicorp_vault.resource_name }}"
+    namespace: "{{ tanzu_secrets.namespace }}"
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
-  name: {{ tanzu_secrets.hashicorp_vault.config_job.name }}
-  namespace: {{ tanzu_secrets.namespace }}
+  name: "{{ tanzu_secrets.hashicorp_vault.config_job.name }}"
+  namespace: "{{ tanzu_secrets.namespace }}"
   labels:
-    app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.config_job.name }}
+    app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.config_job.name }}"
     app.kubernetes.io/instance: hashicorp
 rules:
   - apiGroups:
@@ -72,16 +72,16 @@ rules:
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
-  name: {{ tanzu_secrets.hashicorp_vault.config_job.name }}
-  namespace: {{ tanzu_secrets.namespace }}
+  name: "{{ tanzu_secrets.hashicorp_vault.config_job.name }}"
+  namespace: "{{ tanzu_secrets.namespace }}"
   labels:
-    app.kubernetes.io/name: {{ tanzu_secrets.hashicorp_vault.config_job.name }}
+    app.kubernetes.io/name: "{{ tanzu_secrets.hashicorp_vault.config_job.name }}"
     app.kubernetes.io/instance: hashicorp
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
-  name: {{ tanzu_secrets.hashicorp_vault.config_job.name }}
+  name: "{{ tanzu_secrets.hashicorp_vault.config_job.name }}"
 subjects:
   - kind: ServiceAccount
-    name: {{ tanzu_secrets.hashicorp_vault.config_job.name }}
-    namespace: {{ tanzu_secrets.namespace }}
+    name: "{{ tanzu_secrets.hashicorp_vault.config_job.name }}"
+    namespace: "{{ tanzu_secrets.namespace }}"