chore(external-secrets): upgrade and set pod security standards

2025-11-23 15:00:25 +09:00
parent 0957ef9791
commit bcf9cab7b8
3 changed files with 32 additions and 3 deletions
--- a/external-secrets/vault-secret-store.gomplate.yaml
+++ b/external-secrets/vault-secret-store.gomplate.yaml
@@ -15,4 +15,8 @@ spec:
          serviceAccountRef:
            name: external-secrets
            namespace: {{ .Env.EXTERNAL_SECRETS_NAMESPACE }}
+            # Audience must match the audience configured in Vault Kubernetes auth role
+            # Required for Vault 1.21+ compatibility
+            audiences:
+              - vault
  refreshInterval: {{ .Env.EXTERNAL_SECRETS_REFRESH_INTERVAL }}