global:
  enabled: true
  tlsDisable: true
  psp:
    enable: true

injector:
  enabled: false

server:
  enabled: true
  image:
    repository: "hashicorp/vault"
    tag: "1.11.2"
  auditStorage:
    accessMode: ReadWriteOnce
    annotations: {}
    enabled: false
    mountPath: /vault/audit
    size: 10Gi
    storageClass: null
  authDelegator:
    enabled: true
  dataStorage:
    accessMode: ReadWriteOnce
    annotations: {}
    enabled: true
    mountPath: /vault/data
    size: 10Gi
    storageClass: local-path
  dev:
    enabled: false
  ha:
    enabled: false

  ingress:
    annotations:
      cert-manager.io/cluster-issuer: vault-issuer
      traefik.ingress.kubernetes.io/router.tls: 'true'
    enabled: true
    extraPaths: []
    hosts:
    - host: vault.dc
      paths: []
    labels: {}
    tls:
    - hosts:
      - vault.dc
      secretName: vault-tls

  networkPolicy:
    egress: []
    enabled: true

  standalone:
    enabled: true
    config: |
      ui = true

      listener "tcp" {
        tls_disable = 1
        address = "[::]:8200"
        cluster_address = "[::]:8201"
      }
      storage "file" {
        path = "/vault/data"
      }

ui:
  enabled: true