diff --git a/vault/templates/secret-store.yaml b/vault/templates/secret-store.yaml index 89ca285..4cbe6d6 100644 --- a/vault/templates/secret-store.yaml +++ b/vault/templates/secret-store.yaml @@ -1,18 +1,3 @@ -#apiVersion: external-secrets.io/v1beta1 -#kind: ClusterSecretStore -#metadata: -# name: vault -#spec: -# provider: -# vault: -# server: "http://vault.vault.svc.cluster.local:8200" -# path: "secrets" -# version: "v2" -# auth: -# kubernetes: -# mountPath: "kubernetes" -# role: "external-secrets" ---- apiVersion: external-secrets.io/v1beta1 kind: ClusterSecretStore metadata: @@ -20,11 +5,26 @@ metadata: spec: provider: vault: - server: "https://vault.internal.prd.durp.info" + server: "http://vault.vault.svc.cluster.local:8200" path: "secrets" version: "v2" auth: - tokenSecretRef: - name: vault-token - key: token - namespace: external-secrets + kubernetes: + mountPath: "kubernetes" + role: "dmz-external-secrets" +#--- +#apiVersion: external-secrets.io/v1beta1 +#kind: ClusterSecretStore +#metadata: +# name: vault +#spec: +# provider: +# vault: +# server: "https://vault.internal.prd.durp.info" +# path: "secrets" +# version: "v2" +# auth: +# tokenSecretRef: +# name: vault-token +# key: token +# namespace: external-secrets