From 6826e5d5d71f22eb6dcf5337cb9913be35491693 Mon Sep 17 00:00:00 2001
From: Joseph Hanson <joe@veri.dev>
Date: Wed, 11 Sep 2024 15:58:34 -0500
Subject: [PATCH] beware

---
 kubernetes/apps/security/vault/app/helmrelease.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/kubernetes/apps/security/vault/app/helmrelease.yaml b/kubernetes/apps/security/vault/app/helmrelease.yaml
index f4a8903..a14837d 100644
--- a/kubernetes/apps/security/vault/app/helmrelease.yaml
+++ b/kubernetes/apps/security/vault/app/helmrelease.yaml
@@ -55,6 +55,8 @@ spec:
         # Port number on which readinessProbe will be checked.
         port: *port
       extraEnvironmentVars:
+        # This is required because they will lose their values when the pod is upgraded in my experience.
+        # Probably a Flux thing.
         VAULT_CLUSTER_ADDR: http://$(HOSTNAME).vault-internal:8201
       extraSecretEnvironmentVars:
         - envName: AWS_SECRET_ACCESS_KEY