Add server.hostNetwork option (hashicorp#775)

3etesol · Sep 12, 2022 · 7e21a09 · 7e21a09
1 parent c15d83e
commit 7e21a09
Show file tree

Hide file tree

Showing 4 changed files with 32 additions and 1 deletion.
diff --git a/templates/server-statefulset.yaml b/templates/server-statefulset.yaml
@@ -49,6 +49,10 @@ spec:
       shareProcessNamespace: true
       {{ end }}
       {{- template "server.statefulSet.securityContext.pod" . }}
+      {{- if not .Values.global.openshift }}
+      hostNetwork: {{ .Values.server.hostNetwork }}
+      {{- end }}
+
       volumes:
         {{ template "vault.volumes" . }}
         - name: home

diff --git a/test/unit/server-statefulset.bats b/test/unit/server-statefulset.bats
@@ -1783,4 +1783,26 @@ load _helpers
       . | tee /dev/stderr |
       yq -r '.spec.template.spec.containers[0].securityContext.foo' | tee /dev/stderr)
   [ "${actual}" = "bar" ]
-}
+}
+
+#--------------------------------------------------------------------
+# hostNetwork
+
+@test "server/StatefulSet: server.hostNetwork not set" {
+  cd `chart_dir`
+  local actual=$(helm template \
+      --show-only templates/server-statefulset.yaml \
+      . | tee /dev/stderr |
+      yq -r '.spec.template.spec.hostNetwork' | tee /dev/stderr)
+  [ "${actual}" = "false" ]
+}
+
+@test "server/StatefulSet: server.hostNetwork is set" {
+  cd `chart_dir`
+  local actual=$(helm template \
+      --show-only templates/server-statefulset.yaml \
+      --set 'server.hostNetwork=true' \
+      . | tee /dev/stderr |
+      yq -r '.spec.template.spec.hostNetwork' | tee /dev/stderr)
+  [ "${actual}" = "true" ]
+}
diff --git a/values.schema.json b/values.schema.json
@@ -979,6 +979,9 @@
                         "null",
                         "array"
                     ]
+                },
+                "hostNetwork": {
+                    "type": "boolean"
                 }
             }
         },

diff --git a/values.yaml b/values.yaml
@@ -876,6 +876,8 @@ server:
       pod: {}
       container: {}
 
+  # Should the server pods run on the host network
+  hostNetwork: false
 
 # Vault UI
 ui:
-Original file line number
+Diff line change
@@ Expand Up / @@ -979,6 +979,9 @@ @@
                             "null",
                             "array"
                         ]
+                    },
+                    "hostNetwork": {
+                        "type": "boolean"
                     }
                 }
             },
@@ Expand Down @@