khuedoan-homelab/platform/global-secrets/templates/clustersecretstore/clustersecretstore.yaml
Khue Doan 5e76122a04 refactor(global-secrets): move secret store to the same namespace
Otherwise RBAC will be much more complicated.
2023-11-26 17:39:49 +07:00

19 lines
482 B
YAML

apiVersion: external-secrets.io/v1beta1
kind: ClusterSecretStore
metadata:
name: global-secrets
spec:
provider:
kubernetes:
remoteNamespace: {{ .Release.Namespace }}
server:
caProvider:
type: ConfigMap
name: kube-root-ca.crt
namespace: {{ .Release.Namespace }}
key: ca.crt
auth:
serviceAccount:
name: external-secrets-kubernetes-global-secrets
namespace: {{ .Release.Namespace }}