Helm install in EKS with tls_disable = "true" get error : Unable to attach or mount volumes:

Vault
,
1

i try to install vault with rast internal storage but I’m getting errors when installing on Kubernetes.
i try to install without TLS support as it for internal use only.
in the

i added tls_disable = “true” in override-values.yml

storage "raft" {
          path = "/vault/data"
            retry_join {
            leader_api_addr = "http://vault-0.vault-internal:8200"
            tls_disable = "true"
          }
          retry_join {
            leader_api_addr = "http://vault-1.vault-internal:8200"
            tls_disable = "true"
          }
          retry_join {
            leader_api_addr = "http://vault-2.vault-internal:8200"
            ltls_disable = "true"
          }
          retry_join {
              leader_api_addr = "http://vault-3.vault-internal:8200"
              tls_disable = "true"
          }
          retry_join {
              leader_api_addr = "http://vault-4.vault-internal:8200"
              tls_disable = "true"
          }
        }

but I’m getting errors in the pods

Unable to attach or mount volumes: unmounted volumes=[userconfig-tls-server userconfig-tls-ca userconfig-kms-creds], unattached volumes=[data config userconfig-tls-server userconfig-tls-ca userconfig-kms-creds home vault-token-49s7g audit]: timed out waiting for the condition

Then more errors :

MountVolume.SetUp failed for volume "userconfig-tls-server" : secret "tls-server" not found

MountVolume.SetUp failed for volume "userconfig-tls-ca" : secret "tls-ca" not found

MountVolume.SetUp failed for volume "userconfig-tls-server" : secret "tls-server" not found

what I’m doing wrong ?
Thanks

2

If you don’t use TLS you can omit the Kubernetes secrets that provide these files in your configuration.

Search your values.yaml and override file for entries like:

 extraVolumes:
- type: secret
  name: vault-server-tls

and remove them.

Kind regards