bank-vaults / vault-operator

Kubernetes operator for Hashicorp Vault
https://bank-vaults.dev/docs/operator/
Apache License 2.0
54 stars 21 forks source link

feat: Add option to allow TLS termination by load balancers #437

Closed nate-ribelin closed 3 months ago

nate-ribelin commented 3 months ago

Overview

This feature allows the operator to use an override for API Scheme (http/https) when calling the Raft leader. If the user does not want to use TLS within Vault, but rather have a reverse proxy and/or load balancer terminate the connection, this override allows http or https to be added to the raftLeaderAddress. By default, this API Scheme is set based upon values provided in the Vault config for TLS. This is non-intrusive and will only override the raftLeaderAddress value if provided.