update

argocd/templates/vault.yaml

@@ -0,0 +1,25 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: vault
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://gitlab.com/developerdurp/homelab.git
+    targetRevision: dmz
+    path: vault
+  destination:
+    namespace: vault
+    name: in-cluster
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true  
+    syncOptions:
+      - CreateNamespace=true 
+  ignoreDifferences:
+  - group: admissionregistration.k8s.io
+    kind: MutatingWebhookConfiguration
+    jqPathExpressions:
+    - .webhooks[]?.clientConfig.caBundle

external-secrets/templates/secret-store.yaml

@@ -9,10 +9,9 @@ spec:
       path: "secrets"
       version: "v2"
       auth:
-        tokenSecretRef:
-          name: vault-token
-          key: token
-          namespace: external-secrets
+        kubernetes:
+          mountPath: "kubernetes"
+          role: "dmz-external-secrets"
 
 ---
 

vault/templates/secret-store.yaml

@@ -11,20 +11,20 @@
 #      auth:
 #        kubernetes:
 #          mountPath: "kubernetes"
-#          role: "external-secrets"
----
-apiVersion: external-secrets.io/v1beta1
-kind: ClusterSecretStore
-metadata:
-  name: vault
-spec:
-  provider:
-    vault:
-      server: "https://vault.internal.prd.durp.info"
-      path: "secrets"
-      version: "v2"
-      auth:
-        tokenSecretRef:
-          name: vault-token
-          key: token
-          namespace: external-secrets
+#          role: "dmz-external-secrets"
+#---
+#apiVersion: external-secrets.io/v1beta1
+#kind: ClusterSecretStore
+#metadata:
+#  name: vault
+#spec:
+#  provider:
+#    vault:
+#      server: "https://vault.internal.prd.durp.info"
+#      path: "secrets"
+#      version: "v2"
+#      auth:
+#        tokenSecretRef:
+#          name: vault-token
+#          key: token
+#          namespace: external-secrets

vault/values.yaml

@@ -32,9 +32,3 @@ vault:
       repository: "registry.internal.durp.info/hashicorp/vault"
       tag: "1.15.2"
 
-  server:
-    enabled: false
-
-  ui:
-    enabled: false
-