update vault

Constantin07 · Aug 29, 2023 · f561b11 · f561b11
1 parent 3af5bf8
commit f561b11
Show file tree

Hide file tree

Showing 5 changed files with 5 additions and 4 deletions.
diff --git a/ansible/roles/vault_service/defaults/main.yml b/ansible/roles/vault_service/defaults/main.yml
@@ -3,4 +3,4 @@
 vault_port: 8200
 vault_addr: "http://vault.internal:{{ vault_port }}"
 image_name: "constantin07/vault"
-memory: "300m"
+memory: "380m"
diff --git a/ansible/roles/vault_service/templates/vault-service.service.j2 b/ansible/roles/vault_service/templates/vault-service.service.j2
@@ -16,7 +16,6 @@ ExecStart=/usr/bin/docker run --rm --name vault \
   -p {{ vault_port }}:{{ vault_port }} \
   --network=bridge \
   --cap-add=IPC_LOCK \
-  --ipc=private \
   --memory={{ memory|default('512mb') }} \
   --log-driver=journald \
   {{ image_name }}:{{ vault_version }} \

diff --git a/ansible/vault.yaml b/ansible/vault.yaml
@@ -6,4 +6,4 @@
   roles:
     - docker
     - vault_binary
-    - { role: vault_service, vault_version: "1.14.1" }
+    - { role: vault_service, vault_version: "1.14.2" }
diff --git a/pipelines/dockerfiles/vault/Dockerfile b/pipelines/dockerfiles/vault/Dockerfile
@@ -7,3 +7,5 @@ FROM hashicorp/vault:${VAULT_VERSION}
 COPY config.hcl /vault/config/
 
 RUN chown -R vault:vault /vault/config
+
+#checkov:skip=CKV_DOCKER_3: vault user in the container is already created
diff --git a/pipelines/dockerfiles/vault/Makefile b/pipelines/dockerfiles/vault/Makefile
@@ -9,7 +9,7 @@ K := $(foreach exec,$(EXECUTABLES),\
 
 GIT_COMMIT := $(shell git rev-parse --short HEAD)
 
-VAULT_VERSION = 1.14.1
+VAULT_VERSION = 1.14.2
 
 .PHONY: login build scan publish clean
 default: build publish