refactor(global-secrets): move secret store to the same namespace

Otherwise RBAC will be much more complicated.
2025-07-13 01:08:31 +07:00 · 2023-11-26 17:39:49 +07:00
parent dc16d94071
commit 5e76122a04
9 changed files with 1 additions and 1 deletions
--- a/platform/global-secrets/templates/clustersecretstore/clustersecretstore.yaml
+++ b/platform/global-secrets/templates/clustersecretstore/clustersecretstore.yaml
@ -5,7 +5,7 @@ metadata:
 spec:
  provider:
    kubernetes:
-      remoteNamespace: global-secrets
+      remoteNamespace: {{ .Release.Namespace }}
      server:
        caProvider:
          type: ConfigMap
--- a/platform/global-secrets/templates/clustersecretstore/role.yaml
+++ b/platform/global-secrets/templates/clustersecretstore/role.yaml
--- a/platform/global-secrets/templates/clustersecretstore/rolebinding.yaml
+++ b/platform/global-secrets/templates/clustersecretstore/rolebinding.yaml
--- a/platform/global-secrets/templates/clustersecretstore/serviceaccount.yaml
+++ b/platform/global-secrets/templates/clustersecretstore/serviceaccount.yaml
--- a/platform/global-secrets/templates/secret-generator/configmap.yaml
+++ b/platform/global-secrets/templates/secret-generator/configmap.yaml
--- a/platform/global-secrets/templates/secret-generator/cronjob.yaml
+++ b/platform/global-secrets/templates/secret-generator/cronjob.yaml
--- a/platform/global-secrets/templates/secret-generator/role.yaml
+++ b/platform/global-secrets/templates/secret-generator/role.yaml
--- a/platform/global-secrets/templates/secret-generator/rolebinding.yaml
+++ b/platform/global-secrets/templates/secret-generator/rolebinding.yaml
--- a/platform/global-secrets/templates/secret-generator/serviceaccount.yaml
+++ b/platform/global-secrets/templates/secret-generator/serviceaccount.yaml