v/infrastructure
1
0
Fork 0
Code Issues 13 Pull requests 1 Actions Packages Projects Releases Activity

external-secrets: reconfig vault

Browse source
This commit is contained in:
Vivian 2021-10-29 21:26:22 +02:00
parent 0c513ccf39
commit a6e7132252
No known key found for this signature in database
GPG key ID: A3923C699D1A3BDA
1 changed files with 15 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
cluster/core/external-secrets/external-secrets/vault-secret-store.yaml
View file

@ -13,14 +13,18 @@ spec:
# VaultAppRole authenticates with Vault using the
# App Role auth mechanism
# https://www.vaultproject.io/docs/auth/approle
appRole:
# Path where the App Role authentication backend is mounted
path: "approle"
# RoleID configured in the App Role authentication backend
roleId: "bb841a0e-45c1-9dab-36f0-f72647d6aff0"
# Reference to a key in a K8 Secret that contains the App Role SecretId
# (not commited in git)
secretRef:
name: "vault-secret-id"
namespace: "external-secrets"
key: "secret-id"
tokenSecretRef:
name: "vault-secret-id"
namespace: "external-secrets"
key: "token"
# appRole:
# # Path where the App Role authentication backend is mounted
# path: "approle"
# # RoleID configured in the App Role authentication backend
# roleId: "bb841a0e-45c1-9dab-36f0-f72647d6aff0"
# # Reference to a key in a K8 Secret that contains the App Role SecretId
# # (not commited in git)
# secretRef:
# name: "vault-secret-id"
# namespace: "external-secrets"
# key: "secret-id"