mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 22:29:09 +01:00
Ruben Hensen
7acb7eaa8c
ESO 0.16.2 is the one release that serves both v1beta1 and v1. 0.17 stops serving v1beta1, so manifests still on v1beta1 would fail to sync from the next hop on. For these resources the schemas are name-identical (conversion strategy None); only the apiVersion changes.
21 lines
709 B
YAML
21 lines
709 B
YAML
apiVersion: external-secrets.io/v1
|
|
kind: ClusterSecretStore
|
|
metadata:
|
|
name: vault-backend
|
|
spec:
|
|
provider:
|
|
vault:
|
|
# In-cluster, so syncing secrets doesn't depend on Hetzner or the home
|
|
# internet connection. Plain HTTP, like the ingress → Vault hop.
|
|
server: "http://vault-active.vault.svc:8200"
|
|
path: "kv"
|
|
# Version is the Vault KV secret engine version.
|
|
# This can be either "v1" or "v2", defaults to "v2"
|
|
version: "v2"
|
|
auth:
|
|
# points to a secret that contains a vault token
|
|
# https://www.vaultproject.io/docs/auth/token
|
|
tokenSecretRef:
|
|
name: "vault-token"
|
|
namespace: external-secrets
|
|
key: "token" |