v/infrastructure
1
0
Fork 0
Code Issues 13 Pull requests 1 Actions Packages Projects Releases Activity

external-secrets: reconfig vault

Browse source
This commit is contained in:
Vivian 2021-10-29 21:26:22 +02:00
parent 0c513ccf39
commit a6e7132252
No known key found for this signature in database
GPG key ID: A3923C699D1A3BDA
1 changed files with 15 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
cluster/core/external-secrets/external-secrets/vault-secret-store.yaml
View file

@ -13,14 +13,18 @@ spec:
# VaultAppRole authenticates with Vault using the # VaultAppRole authenticates with Vault using the
# App Role auth mechanism # App Role auth mechanism
# https://www.vaultproject.io/docs/auth/approle # https://www.vaultproject.io/docs/auth/approle
appRole: tokenSecretRef:
# Path where the App Role authentication backend is mounted name: "vault-secret-id"
path: "approle" namespace: "external-secrets"
# RoleID configured in the App Role authentication backend key: "token"
roleId: "bb841a0e-45c1-9dab-36f0-f72647d6aff0" # appRole:
# Reference to a key in a K8 Secret that contains the App Role SecretId # # Path where the App Role authentication backend is mounted
# (not commited in git) # path: "approle"
secretRef: # # RoleID configured in the App Role authentication backend
name: "vault-secret-id" # roleId: "bb841a0e-45c1-9dab-36f0-f72647d6aff0"
namespace: "external-secrets" # # Reference to a key in a K8 Secret that contains the App Role SecretId
key: "secret-id" # # (not commited in git)
# secretRef:
# name: "vault-secret-id"
# namespace: "external-secrets"
# key: "secret-id"