New to KubeVault? Please start here.

Google Cloud Storage (GCS)

In Google Cloud Storage (GCS) storage backend, Vault data will be stored in Google Cloud Storage. Vault documentation for GCS storage can be found in here.

apiVersion: kubevault.com/v1alpha1
kind: VaultServer
metadata:
  name: vault-with-gcs
  namespace: demo
spec:
  replicas: 1
  version: "1.2.0"
  backend:
    gcs:
      bucket: "my-vault-storage"
      credentialSecret: "my-gcs-credential"

spec.backend.gcs

To use GCS as backend storage in Vault specify spec.backend.gcs in VaultServer CRD.

spec:
  backend:
    gcs:
      bucket: <bucket_name>
      chunkSize: <chunk_size>
      maxParallel: <max_parallet>
      haEnabled: <true/false>
      credentialSecret: <secret_name>

Here, we are going to describe the various attributes of the spec.backend.gcs field.

gcs.bucket

gcs.bucket is a required field that specifies the name of the bucket to use for storage.

spec:
  backend:
    gcs:
      bucket: "my-vault-storage"

gcs.chunkSize

gcs.chunkSize is an optional field that specifies the maximum size (in kilobytes) to send in a single request. If this field is not specified, then Vault will set value to 8192. If this filed is set to 0, Vault will attempt to send the whole object at once, but will not retry any failures.

spec:
  backend:
    gcs:
      chunkSize: "1024"

gcs.credentialSecret

gcs.credentialSecret is a required field that specifies the name of the secret containing Google application credential. The secret contains the following key:

• sa.json

spec:
  backend:
    gcs:
      credentialSecret: "google-application-credential"

gcs.haEnabled

gcs.haEnabled is an optional field that specifies if high availability mode is enabled. This field accepts boolean value. The default value is false.

spec:
  backend:
    gcs:
      haEnabled: true

gcs.maxParallel

maxParallel is an optional field that specifies the maximum number of parallel operations to take place. This field accepts integer value. If this field is not specified, then Vault will set value to 128.

spec:
  backend:
    gcs:
      maxParallel: 124