update
This commit is contained in:
@@ -1,32 +0,0 @@
|
||||
apiVersion: cert-manager.io/v1
|
||||
kind: Issuer
|
||||
metadata:
|
||||
name: quickstart-kong-selfsigned-issuer-root
|
||||
spec:
|
||||
selfSigned: {}
|
||||
---
|
||||
apiVersion: cert-manager.io/v1
|
||||
kind: Certificate
|
||||
metadata:
|
||||
name: quickstart-kong-selfsigned-issuer-ca
|
||||
spec:
|
||||
commonName: quickstart-kong-selfsigned-issuer-ca
|
||||
duration: 2160h0m0s
|
||||
isCA: true
|
||||
issuerRef:
|
||||
group: cert-manager.io
|
||||
kind: Issuer
|
||||
name: quickstart-kong-selfsigned-issuer-root
|
||||
privateKey:
|
||||
algorithm: ECDSA
|
||||
size: 256
|
||||
renewBefore: 360h0m0s
|
||||
secretName: quickstart-kong-selfsigned-issuer-ca
|
||||
---
|
||||
apiVersion: cert-manager.io/v1
|
||||
kind: Issuer
|
||||
metadata:
|
||||
name: quickstart-kong-selfsigned-issuer
|
||||
spec:
|
||||
ca:
|
||||
secretName: quickstart-kong-selfsigned-issuer-ca
|
||||
@@ -1,22 +1,11 @@
|
||||
apiVersion: v1
|
||||
data:
|
||||
license: J3t9Jw==
|
||||
kind: Secret
|
||||
metadata:
|
||||
creationTimestamp: null
|
||||
name: kong-enterprise-license
|
||||
namespace: kong
|
||||
|
||||
---
|
||||
|
||||
apiVersion: external-secrets.io/v1beta1
|
||||
kind: ExternalSecret
|
||||
metadata:
|
||||
name: kong-cluster-cert
|
||||
spec:
|
||||
secretStoreRef:
|
||||
name: vault-kong
|
||||
kind: SecretStore
|
||||
name: vault
|
||||
kind: ClusterSecretStore
|
||||
target:
|
||||
name: kong-cluster-cert
|
||||
data:
|
||||
@@ -28,54 +17,3 @@ spec:
|
||||
remoteRef:
|
||||
key: secrets/kong/tls
|
||||
property: key
|
||||
|
||||
---
|
||||
|
||||
apiVersion: external-secrets.io/v1beta1
|
||||
kind: SecretStore
|
||||
metadata:
|
||||
name: vault-kong
|
||||
spec:
|
||||
provider:
|
||||
vault:
|
||||
server: "http://vault.vault.svc.cluster.local:8200"
|
||||
path: "secrets"
|
||||
version: "v2"
|
||||
auth:
|
||||
kubernetes:
|
||||
mountPath: "kubernetes"
|
||||
role: "external-secrets"
|
||||
|
||||
---
|
||||
|
||||
apiVersion: external-secrets.io/v1beta1
|
||||
kind: ExternalSecret
|
||||
metadata:
|
||||
name: kong-config-secret
|
||||
spec:
|
||||
secretStoreRef:
|
||||
name: vault-kong
|
||||
kind: SecretStore
|
||||
target:
|
||||
name: kong-config-secret
|
||||
data:
|
||||
- secretKey: admin_gui_session_conf
|
||||
remoteRef:
|
||||
key: secrets/kong/config
|
||||
property: admin_gui_session_conf
|
||||
- secretKey: kong_admin_password
|
||||
remoteRef:
|
||||
key: secrets/kong/config
|
||||
property: kong_admin_password
|
||||
- secretKey: password
|
||||
remoteRef:
|
||||
key: secrets/kong/config
|
||||
property: password
|
||||
- secretKey: pg_host
|
||||
remoteRef:
|
||||
key: secrets/kong/config
|
||||
property: pg_host
|
||||
- secretKey: portal_session_conf
|
||||
remoteRef:
|
||||
key: secrets/kong/config
|
||||
property: portal_session_conf
|
||||
|
||||
Reference in New Issue
Block a user