Skip to content

feat(helm): add vault secret generation#9

Open
sb-embeteco wants to merge 13 commits into
developfrom
feat/chart-vault-init
Open

feat(helm): add vault secret generation#9
sb-embeteco wants to merge 13 commits into
developfrom
feat/chart-vault-init

Conversation

@sb-embeteco

Copy link
Copy Markdown

WHAT

  • Adds vault initialization script job to generate and push AES or RSA keys into the vault on install
  • Removes static demonstration keypairs from templates
  • Fixes missing assignment of iatp default scope environment variables
  • Changes PostgreSQL Dependency from legacy Bitnami to CloudPirates (also see Tractus-X migration Guide)
  • Changes default connector, wallet and issuer name values to better align with Construct-X Wallet values
  • Removes duplicate assignments of certain environment variables

WHY

  • The current EDC Helm deployment uses static RSA keypairs stored in a ConfigMap and pushes them into the vault, which is only recommended in demonstration scenarios.

FURTHER NOTES

What has been tested

  • helm lint --strict passes without errors
  • helm template renders without errors
  • Deployed to cluster using Construct-X Wallet and Issuer
    • Note: with Istio as Ingresscontroller instead of nginx Ingresscontroller
  • Vault-init job completed successfully
  • Controlplane and Dataplane pods reached Running state with no error messages
  • Endpoints reachable
  • Paricipant creation successful via super-user extension
  • Transcation flow between namespace-separated consumer- and provider-edc was tested and passed using Construct-X Bruno Collection

Linked Issue(s)

Contributes to CXAP6-123

@sb-embeteco sb-embeteco self-assigned this Jun 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant