add auto init/unseal for vault

config.yaml

@@ -197,6 +197,14 @@ modules:
 
   secrets_storage:
     enabled: true
+    key_shares: 5
+    key_threshold: 3
+
+    # specify unseal keys to auto-unseal after updates or restarts
+    unseal_keys:
+      - "8gSX9uR1P0ypMlHN2YSwbARACE/VzBU3nF7Pg3M6mWzj"
+      - "XV2MmiPbbiWpp0uzfDUTlPqtDfF8Z/HlrZKbHDZXZiGO"
+      - "b3EPh7JxDLeAgXj6oMxdZronEiJ3ef9KJDazsaibD3TB"
     expose:
       type: ingress # ingress or NodePort
       domain: vault.disk.lt.t1.cloud
@@ -208,17 +216,12 @@ modules:
     # requires secrets_store_csi_driver in additional modules
     csi_integration:
       enabled: true
-      image: hashicorp/vault-csi-provider
-      version: 1.4.1
     agent:
       image: hashicorp/vault
-      version: 1.15.6
-    injector:
-      image: hashicorp/vault-k8s
-      version: 1.3.1
+      tag: 1.16.0
     server:
       image: "hashicorp/vault"
-      version: 1.15.6
+      tag: 1.16.0
       persistence:
         size: 10Gi