update

vault/templates/secret-store.yaml

@@ -1,18 +1,3 @@
-#apiVersion: external-secrets.io/v1beta1
-#kind: ClusterSecretStore
-#metadata:
-#  name: vault
-#spec:
-#  provider:
-#    vault:
-#      server: "http://vault.vault.svc.cluster.local:8200"
-#      path: "secrets"
-#      version: "v2"
-#      auth:
-#        kubernetes:
-#          mountPath: "kubernetes"
-#          role: "external-secrets"
----
 apiVersion: external-secrets.io/v1beta1
 kind: ClusterSecretStore
 metadata:
@@ -20,11 +5,26 @@ metadata:
 spec:
   provider:
     vault:
-      server: "https://vault.internal.prd.durp.info"
+      server: "http://vault.vault.svc.cluster.local:8200"
       path: "secrets"
       version: "v2"
       auth:
-        tokenSecretRef:
+        kubernetes:
-          name: vault-token
+          mountPath: "kubernetes"
-          key: token
+          role: "dmz-external-secrets"
-          namespace: external-secrets
+#---
+#apiVersion: external-secrets.io/v1beta1
+#kind: ClusterSecretStore
+#metadata:
+#  name: vault
+#spec:
+#  provider:
+#    vault:
+#      server: "https://vault.internal.prd.durp.info"
+#      path: "secrets"
+#      version: "v2"
+#      auth:
+#        tokenSecretRef:
+#          name: vault-token
+#          key: token
+#          namespace: external-secrets