hashicorp / hashicorp/vault-helm

Default Timeout Settings on the Helm Chart

Open
#901 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Shell
Stars
1.3k
Forks
898
Avg merge
3d 1h
Merged PRs (30d)
1

Description

**Is your feature request related to a problem? Please describe.**
Cluster communication timeout's are too tight by default when bootstrapping the Vault cluster in helm/k8s.

e.g. Running ```vault operator init```

**Describe the solution you'd like**
Seems that EKS 1.24 (from 1.21) adds additional network latency within the cluster.
https://support.hashicorp.com/hc/en-us/articles/8552873602451-Vault-on-Kubernetes-and-context-deadline-exceeded-errors

What is interesting is that this isn't a default setting in the helm chart (which it should be) to account for the increased latency between versions.

Adding it here fixed the issue entirely, and when the vault gets unsealed, the keys are properly outputted to the CLI without timeout.

```terraform
set {
name = "server.extraEnvironmentVars.VAULT_CLIENT_TIMEOUT"
value = "300s"
}
```

I am thinking that increasing the timeout may help account for network latency in k8s/ eks.

Full chart settings that worked:

```terraform
resource "helm_release" "vault" {
name = "vault"
repository = "https://helm.releases.hashicorp.com"
chart = "vault"
namespace = "vault"

set {
name = "server.ha.enabled"
value = "true"
}
set {
name = "server.ha.raft.enabled"
value = "true"
}
set {
name = "server.ha.raft.setNodeId"
value = "true"
}
set {
name = "server.extraEnvironmentVars.VAULT_CLIENT_TIMEOUT"
value = "300s"
}
set {
name = "server.ha.raft.config"
value = <

Contributor guide

Open the contributing guide

Research direction

Inspect the Helm chart's values and templates for server.extraEnvironmentVars and the default timeout behavior. The change is complete when the chart provides a suitable default for VAULT_CLIENT_TIMEOUT and Vault cluster initialization and unsealing no longer hit the reported timeout.

Written by the indexing model from the issue text.

Assessment

Tech stack
helm, kubernetes, terraform
Domain
cloud, devops, infrastructure
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.