FEAT(velero): add velero and falco UI auth

- secrets from Vault
This commit is contained in:
2025-12-27 21:27:08 +09:00
parent cd9e2822f4
commit 044cae85e3
3 changed files with 27 additions and 1 deletions

View File

@@ -40,7 +40,9 @@ spec:
# Environment variables # Environment variables
env: [] env: []
envFrom: [] envFrom:
- secretRef:
name: velero-ui-secret
# Pod security context # Pod security context
podSecurityContext: podSecurityContext:

View File

@@ -7,4 +7,5 @@ resources:
# Velero credentials from Vault # Velero credentials from Vault
- external-secret.yaml - external-secret.yaml
- vault/velero-ui-secret.yaml
- ingress/velero-ui-ingress.yaml - ingress/velero-ui-ingress.yaml

View File

@@ -0,0 +1,23 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: velero-ui-secret
namespace: velero
spec:
refreshInterval: 1h
secretStoreRef:
kind: ClusterSecretStore
name: vault-backend
target:
name: velero-ui-secret
creationPolicy: Owner
data:
- secretKey: username
remoteRef:
key: cluster-infrastructure/velero
property: UI_USERNAME
- secretKey: password
remoteRef:
key: cluster-infrastructure/velero
property: UI_PASSWORD