Files
buun-stack/external-secrets/vault-secret-store.gomplate.yaml
2025-08-29 23:08:15 +09:00

19 lines
512 B
YAML

apiVersion: external-secrets.io/v1
kind: ClusterSecretStore
metadata:
name: vault-secret-store
spec:
provider:
vault:
server: http://vault.{{ .Env.K8S_VAULT_NAMESPACE }}:8200
path: secret
version: v2
auth:
kubernetes:
role: external-secrets
mountPath: kubernetes
serviceAccountRef:
name: external-secrets
namespace: {{ .Env.EXTERNAL_SECRETS_NAMESPACE }}
refreshInterval: {{ .Env.EXTERNAL_SECRETS_REFRESH_INTERVAL }}