update
This commit is contained in:
@@ -13,4 +13,4 @@ spec:
|
|||||||
mountPath: "kubernetes"
|
mountPath: "kubernetes"
|
||||||
role: "external-secrets"
|
role: "external-secrets"
|
||||||
serviceAccountRef:
|
serviceAccountRef:
|
||||||
name: "vault-dmz"
|
name: "vault"
|
||||||
|
|||||||
@@ -1,30 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Secret
|
|
||||||
metadata:
|
|
||||||
name: vault-token-g955r
|
|
||||||
annotations:
|
|
||||||
kubernetes.io/service-account.name: vault-dmz
|
|
||||||
type: kubernetes.io/service-account-token
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
apiVersion: v1
|
|
||||||
kind: ServiceAccount
|
|
||||||
metadata:
|
|
||||||
name: vault-auth
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
kind: ClusterRoleBinding
|
|
||||||
metadata:
|
|
||||||
name: role-tokenreview-binding
|
|
||||||
namespace: vault
|
|
||||||
roleRef:
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
||||||
kind: ClusterRole
|
|
||||||
name: system:auth-delegator
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: vault-auth
|
|
||||||
namespace: vault
|
|
||||||
Reference in New Issue
Block a user