Listing 1: Standard-Storageclass anlegen

apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
name: default
annotations:
storageclass.kubernetes.io/is-defaultclass: "true"
provisioner: k8s.io/minikube-hostpath
parameters:
type: pd-standard


Listing 2: Persistenten Speicher erzeugen

apiVersion: v1
kind: PersistentVolume
metadata:
name: pv-vault
spec:
storageClassName: default
accessModes:
- ReadWriteOnce
capacity:
storage: 10Gi
hostPath:
path: /tmp/pv


Listing 3: Vault-Policy für Boundary erzeugen

vault policy write boundary-controller - <EOF
path "auth/token/lookup-self" {
capabilities = ["read"]
}
path "auth/token/renew-self" {
capabilities = ["update"]
}
path "auth/token/revoke-self" {
capabilities = ["update"]
}
path "sys/leases/renew" {
capabilities = ["update"]
}
path "sys/leases/revoke" {
capabilities = ["update"]
}
path "sys/capabilities-self" {
capabilities = ["update"]
}
path "kubernetes/creds/auto-managed-sa-androle" {
capabilities = ["update"]
}
EOF