Support for a version that just uses a tainted node pool
andrewwatson opened this issue · comments
I'd like to submit a PR that shows setting up a tainted node pool so that the whole cluster doesn't have the vault service account on each node.
While I think that'd be accepted, the general "best practice" we've been recommending is to have a dedicated k8s cluster just for Vault.
I'm gonna close this, but we'd accept a PR for this 😄