apiVersion: v1
items:
- apiVersion: vault.banzaicloud.com/v1alpha1
  kind: Vault
  metadata:

    generation: 4
    name: hashicorp-vault
    namespace: 

  spec:
    bankVaultsImage: banzaicloud/bank-vaults:1.15.3
    config:
      listener:
        tcp:
          address: 0.0.0.0:8200
          tls_cert_file: /vault/tls/server.crt
          tls_key_file: /vault/tls/server.key
      seal:
        awskms:
          kms_key_id: xxxx-xxx-xxx-xxx-xxx
          region: eu-west-1
      storage:
        dynamodb:
          ha_enabled: "true"
          region: eu-west-1
          table: storage-backend
      telemetry:
        statsd_address: localhost:9125
      ui: true
    credentialsConfig:
      env: ""
      path: ""
      secretName: ""
    externalConfig:
      policies:
      - name: allow_secrets
        rules: path "secret/*" { capabilities = ["create", "read", "update", "delete",
          "list"] }
      - name: allow_pki
        rules: path "pki/*" { capabilities = ["create", "read", "update", "delete",
          "list"] }
      secrets:
      - description: General secrets.
        options:
          version: 2
        path: secret
        type: kv
    image: docker.io/library/vault:1.11.0
    nodeAffinity: {}
    securityContext: {}
    serviceAccount: hashicorp-vault
    serviceType: ClusterIP
    size: 3
    unsealConfig:
      aws:
        kmsKeyId: xxxx-xxx-xxx-xxx-xxx
        s3Bucket: autounseal
        s3Prefix: ""
        s3SSE: AES256
      kubernetes: {}
      options:
        preFlightChecks: true
    vaultAnnotations:
      type/instance: vault
    vaultConfigurerAnnotations:
      type/instance: vaultconfigurer
    vaultContainerSpec:
      name: ""
      resources: {}
    vaultEnvsConfig:
    - name: VAULT_LOG_LEVEL
      value: debug
    - name: VAULT_API_ADDR
      value: https://vault
  status:
    conditions:
    - status: "True"
      type: Healthy
    leader: hashicorp-vault-2
    nodes:
    - hashicorp-vault-0
    - hashicorp-vault-1
    - hashicorp-vault-2
kind: List
metadata:
  resourceVersion: ""
  selfLink: ""