Skip to content

Commit

Permalink
docs/vault-k8s: updates for v1.6.0 release (#29152)
Browse files Browse the repository at this point in the history
* docs/vault-k8s: updates for v1.6.0 release

* Apply suggestions from code review

Co-authored-by: Sarah Chavis <[email protected]>

* updating whitespace and an extra "injector"

---------

Co-authored-by: Sarah Chavis <[email protected]>
  • Loading branch information
tvoran and schavis authored Jan 10, 2025
1 parent ff2d7ec commit dac2ffc
Show file tree
Hide file tree
Showing 2 changed files with 28 additions and 1 deletion.
2 changes: 1 addition & 1 deletion website/content/docs/platform/k8s/injector/annotations.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ them, optional commands to run, etc.

- `vault.hashicorp.com/agent-image` - name of the Vault docker image to use. This
value overrides the default image configured in the injector and is usually
not needed. Defaults to `hashicorp/vault:1.18.1`.
not needed. Defaults to `hashicorp/vault:1.18.2`.

- `vault.hashicorp.com/agent-init-first` - configures the pod to run the Vault Agent
init container first if `true` (last if `false`). This is useful when other init
Expand Down
27 changes: 27 additions & 0 deletions website/content/docs/platform/k8s/injector/index.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -189,6 +189,33 @@ The configuration map must contain either one or both of the following files:

An example of mounting a Vault Agent configmap [can be found here](/vault/docs/platform/k8s/injector/examples#configmap-example).

### Injector telemetry

<Tip>

Set [`injector.metrics.enabled`](/vault/docs/platform/k8s/helm/configuration#metrics)
to `true` in the Helm chart to start collecting injector metrics.

</Tip>

Vault Agent injector collects the following Prometheus metrics in addition to
the default set of `golang` metrics:

- `vault_agent_injector_request_queue_length` - The number of pending webhook requests for the injector.

- `vault_agent_injector_request_processing_duration_ms` - A histogram of webhook
request processing times in milliseconds.

- `vault_agent_injector_injections_by_namespace_total` - The total count of
Agent container injections, grouped by Kubernetes `namespace` and `injection_type`.
Vault Agent injector counts the following injection types:
- `init_only`
- `sidecar_only`
- `init_and_sidecar`

- `vault_agent_injector_failed_injections_by_namespace_total` - The total count
of failed Agent sidecar injections, grouped by Kubernetes `namespace`.

## Tutorial

Refer to the [Injecting Secrets into Kubernetes Pods via Vault Helm
Expand Down

0 comments on commit dac2ffc

Please sign in to comment.