Connect vault to oidc

manifests/vault/values.yaml

@@ -23,18 +23,25 @@ server:
   extraEnvironmentVars:
     VAULT_ADDR: http://127.0.0.1:8200
 
-  postStart:
+  extraInitContainers:
+    - name: configure-oidc
+      image: hashicorp/vault:1.15.5
       command:
         - /bin/sh
         - -c
         - |
-        export VAULT_ADDR=http://127.0.0.1:8200
+          echo "Waiting for Vault to initialize..."
-        vault auth enable oidc
+          until curl -s http://vault:8200/v1/sys/health | grep '"initialized":true'; do
+            sleep 2
+          done
+
+          export VAULT_ADDR=http://vault:8200
+          vault auth enable oidc || true
 
           vault write auth/oidc/config \
-          oidc_discovery_url="https://keycloack/realms/lab" \
+            oidc_discovery_url="https://<KEYCLOAK_URL>/realms/<REALM>" \
             oidc_client_id="vault" \
-          oidc_client_secret="8GWiUqwUZimb4xXHqFNTYCrTkKyc9hrY" \
+            oidc_client_secret="<CLIENT_SECRET>" \
             default_role="vault-role"
 
           vault write auth/oidc/role/vault-role \
@@ -46,6 +53,13 @@ server:
             policies="default" \
             ttl="1h"
 
+      env:
+        - name: VAULT_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: vault-init
+              key: root-token
+
 ui:
   enabled: true