- for vault-backend - Create cluster-wide secret store for External Secrets Operator - Configure Kubernetes auth with external-secrets service account - Enable all namespaces to access Vault secrets via ClusterSecretStore
12 lines
438 B
YAML
12 lines
438 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
# ArgoCD Application 리소스는 infrastructure/kustomization.yaml에서 관리
|
|
# - argocd/vault.yaml
|
|
# - argocd/vault-secrets.yaml
|
|
|
|
# External Secrets integration
|
|
# ServiceAccount is managed by external-secrets Helm chart
|
|
- cluster-secret-store.yaml
|
|
# vault-config-job.yaml은 삭제됨 (민감한 정보 포함으로 인해 .md 파일로 대체) |