mirror of
https://github.com/khuedoan/homelab.git
synced 2025-07-14 01:40:11 +07:00
feat(external-secrets): add test secret store
This commit is contained in:
25
platform/external-secrets/templates/clustersecretstore.yaml
Normal file
25
platform/external-secrets/templates/clustersecretstore.yaml
Normal file
@ -0,0 +1,25 @@
|
|||||||
|
apiVersion: external-secrets.io/v1alpha1
|
||||||
|
kind: ClusterSecretStore
|
||||||
|
metadata:
|
||||||
|
name: vault
|
||||||
|
spec:
|
||||||
|
provider:
|
||||||
|
vault:
|
||||||
|
server: http://vault.vault:8200
|
||||||
|
path: secret
|
||||||
|
auth:
|
||||||
|
tokenSecretRef:
|
||||||
|
name: vault-token
|
||||||
|
namespace: vault
|
||||||
|
key: token
|
||||||
|
# TODO switch to kubernetes auth
|
||||||
|
# kubernetes:
|
||||||
|
# mountPath: "kubernetes"
|
||||||
|
# role: "demo"
|
||||||
|
# serviceAccountRef:
|
||||||
|
# name: "my-sa"
|
||||||
|
# namespace: "secret-admin"
|
||||||
|
# secretRef:
|
||||||
|
# name: "my-secret"
|
||||||
|
# namespace: "secret-admin"
|
||||||
|
# key: "vault"
|
Reference in New Issue
Block a user