mirror of
https://github.com/khuedoan/homelab.git
synced 2025-01-09 06:47:01 +07:00
36 lines
809 B
YAML
36 lines
809 B
YAML
apiVersion: external-secrets.io/v1alpha1
|
|
kind: ClusterSecretStore
|
|
metadata:
|
|
name: vault
|
|
spec:
|
|
provider:
|
|
vault:
|
|
server: http://vault.vault:8200
|
|
path: secret
|
|
auth:
|
|
tokenSecretRef:
|
|
name: vault-token
|
|
namespace: vault
|
|
key: token
|
|
# TODO switch to kubernetes auth
|
|
# kubernetes:
|
|
# mountPath: "kubernetes"
|
|
# role: "demo"
|
|
# serviceAccountRef:
|
|
# name: "my-sa"
|
|
# namespace: "secret-admin"
|
|
# secretRef:
|
|
# name: "my-secret"
|
|
# namespace: "secret-admin"
|
|
# key: "vault"
|
|
---
|
|
# TODO switch to kubernetes auth
|
|
# and turn off vault dev mode
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: vault-token
|
|
namespace: vault
|
|
data:
|
|
token: cm9vdA== # root
|