Install KubeVault Community Edition

KubeVault comes in 2 editions: Community Edition and Enterprise Edition. Community Edition only manages KubeVault custom resources in the default Kubernetes namespace. Enterprise Edition can be used to manage KubeVault custom resources in any Kubernetes namespace. A full features comparison between the KubeVault Community edition and Enterprise edition can be found here.

To use the KubeVault Community edition, you can grab 1 year free license from here. After that, you can issue another license for one more year. Typically we release a new version of the operator at least quarterly. So, you can just grab a new license every time you upgrade the operator.

Get a License

In this section, we are going to show you how you can get a 1 year free license for the KubeVault Community edition. You can get a license for your Kubernetes cluster by going through the following steps:

• At first, go to AppsCode License Server and fill-up the form. It will ask for your Name, Email, the product you want to install, and your cluster ID (UID of the kube-system namespace).

• Provide your name and email address. You can provide your personal or work email address.

• Then, select KubeVault Community Edition in the product field.

• Now, provide your cluster-ID. You can get your cluster ID easily by running the following command:

  $ kubectl get ns kube-system -o=jsonpath='{.metadata.uid}'
  

• Then, you have to agree with the terms and conditions. We recommend reading it before checking the box.

• Now, you can submit the form. After you submit the form, the AppsCode License server will send an email to the provided email address with a link to your license file.

• Navigate to the provided link and save the license into a file. Here, we save the license to a license.txt file.

Here is a screenshot of the license form.

You can create licenses for as many clusters as you want. You can upgrade your license any time without re-installing KubeVault by following the upgrading guide from here.

KubeVault licensing process has been designed to work with CI/CD workflow. You can automatically obtain a license from your CI/CD pipeline by following the guide from here.

Install

KubeVault operator can be installed as a Helm chart or simply as Kubernetes manifests.

• Helm 3 (Recommended)
• YAML

$ helm repo add appscode https://charts.appscode.com/stable/
$ helm repo update

$ helm search repo appscode/kubevault
NAME                        CHART VERSION APP VERSION DESCRIPTION                                       
appscode/kubevault          v2021.09.27   v2021.09.27 KubeVault by AppsCode - HashiCorp Vault operato...
appscode/kubevault-catalog  v2021.09.27   v2021.09.27 KubeVault Catalog by AppsCode - Catalog for Kub...
appscode/kubevault-crds     v2021.09.27   v2021.09.27 KubeVault Custom Resource Definitions             
appscode/kubevault-operator v0.5.0        v0.5.0      KubeVault Operator by AppsCode - HashiCorp Vaul...

# Install KubeVault Community operator chart
$ helm install kubevault appscode/kubevault \
  --version v2021.09.27 \
  --namespace kubevault --create-namespace \
  --set-file global.license=/path/to/the/license.txt

$ helm repo add appscode https://charts.appscode.com/stable/
$ helm repo update

$ helm search repo appscode/kubevault
NAME                        CHART VERSION APP VERSION DESCRIPTION                                       
appscode/kubevault          v2021.09.27   v2021.09.27 KubeVault by AppsCode - HashiCorp Vault operato...
appscode/kubevault-catalog  v2021.09.27   v2021.09.27 KubeVault Catalog by AppsCode - Catalog for Kub...
appscode/kubevault-crds     v2021.09.27   v2021.09.27 KubeVault Custom Resource Definitions             
appscode/kubevault-operator v0.5.0        v0.5.0      KubeVault Operator by AppsCode - HashiCorp Vaul...

#  Install KubeVault Community operator chart
$ helm template kubevault appscode/kubevault \
  --version v2021.09.27 \
  --namespace kubevault --create-namespace \
  --set-file global.license=/path/to/the/license.txt \
  --set global.skipCleaner=true | kubectl apply -f -

Verify installation

To check if KubeVault operator pods have started, run the following command:

$ watch kubectl get pods --all-namespaces -l "app.kubernetes.io/instance=kubevault"

NAMESPACE   NAME                                            READY   STATUS    RESTARTS   AGE
kubevault   kubevault-kubevault-operator-5d5cc4c7c9-mj5d5   1/1     Running   0          2m18s

Once the operator pod is running, you can cancel the above command by typing Ctrl+C.

Now, to confirm CRD groups have been registered by the operator, run the following command:

$ kubectl get crd -l app.kubernetes.io/name=kubevault

Now, you are ready to create your first database using KubeVault.