20 lines
576 B
YAML
20 lines
576 B
YAML
|
# ClusterSecretStore — ESO's connection to Vault
|
||
|
|
# References the Vault instance deployed in the iam namespace.
|
||
|
|
# Uses Kubernetes auth method (safe for in-cluster access).
|
||
|
|
# Namespace: default (ClusterSecretStore is cluster-scoped, not namespaced).
|
||
|
|
|
||
|
|
apiVersion: external-secrets.io/v1beta1
|
||
|
|
kind: ClusterSecretStore
|
||
|
|
metadata:
|
||
|
|
name: vault-homelab
|
||
|
|
spec:
|
||
|
|
provider:
|
||
|
|
vault:
|
||
|
|
server: "http://vault.iam.svc.cluster.local:8200"
|
||
|
|
path: "secret"
|
||
|
|
version: "v2"
|
||
|
|
auth:
|
||
|
|
kubernetes:
|
||
|
|
mountPath: "kubernetes"
|
||
|
|
role: "external-secrets"
|