update

durpapi/templates/secrets.yaml

@@ -1,11 +1,11 @@
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
-  name: vault-durpapi
+  name: durpapi-secret
 spec:
   secretStoreRef:
-    name: vault-durpapi
+    name: vault
-    kind: SecretStore
+    kind: ClusterSecretStore
   target:
     name: durpapi-secret
   data:
@@ -46,19 +46,19 @@ spec:
       key: secrets/durpapi/postgres
       property: db_name
 
----
+#---
-
+#
-apiVersion: external-secrets.io/v1beta1
+#apiVersion: external-secrets.io/v1beta1
-kind: SecretStore
+#kind: SecretStore
-metadata:
+#metadata:
-  name: vault-durpapi
+#  name: vault-durpapi
-spec:
+#spec:
-  provider:
+#  provider:
-    vault:
+#    vault:
-      server: "http://vault.vault.svc.cluster.local:8200"
+#      server: "http://vault.vault.svc.cluster.local:8200"
-      path: "secrets"
+#      path: "secrets"
-      version: "v2"
+#      version: "v2"
-      auth:
+#      auth:
-        kubernetes:
+#        kubernetes:
-          mountPath: "kubernetes"
+#          mountPath: "kubernetes"
-          role: "external-secrets"
+#          role: "external-secrets"

vault/templates/secret-store.yaml

@@ -0,0 +1,14 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ClusterSecretStore
+metadata:
+  name: vault
+spec:
+  provider:
+    vault:
+      server: "http://vault.vault.svc.cluster.local:8200"
+      path: "secrets"
+      version: "v2"
+      auth:
+        kubernetes:
+          mountPath: "kubernetes"
+          role: "external-secrets"