mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-21 05:26:49 +00:00
20 lines
651 B
YAML
20 lines
651 B
YAML
# manifests/clustersecretstore-vault.yaml
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ClusterSecretStore
|
|
metadata:
|
|
name: vault-backend
|
|
spec:
|
|
provider:
|
|
vault:
|
|
server: http://vault.vault.svc:8200
|
|
path: secret # KV v2 mount
|
|
version: v2
|
|
auth:
|
|
kubernetes:
|
|
# MUST be just the mount name; Vault shows this as "kubernetes/" in `vault auth list`
|
|
mountPath: kubernetes
|
|
role: eso-writer # role we create in Vault
|
|
serviceAccountRef:
|
|
name: external-secrets # SA created by the ESO chart
|
|
namespace: external-secrets
|