FEAT(velero): add velero and falco UI auth
- secrets from Vault
This commit is contained in:
@@ -40,7 +40,9 @@ spec:
|
|||||||
|
|
||||||
# Environment variables
|
# Environment variables
|
||||||
env: []
|
env: []
|
||||||
envFrom: []
|
envFrom:
|
||||||
|
- secretRef:
|
||||||
|
name: velero-ui-secret
|
||||||
|
|
||||||
# Pod security context
|
# Pod security context
|
||||||
podSecurityContext:
|
podSecurityContext:
|
||||||
|
|||||||
@@ -7,4 +7,5 @@ resources:
|
|||||||
|
|
||||||
# Velero credentials from Vault
|
# Velero credentials from Vault
|
||||||
- external-secret.yaml
|
- external-secret.yaml
|
||||||
|
- vault/velero-ui-secret.yaml
|
||||||
- ingress/velero-ui-ingress.yaml
|
- ingress/velero-ui-ingress.yaml
|
||||||
|
|||||||
23
velero/vault/velero-ui-secret.yaml
Normal file
23
velero/vault/velero-ui-secret.yaml
Normal file
@@ -0,0 +1,23 @@
|
|||||||
|
apiVersion: external-secrets.io/v1beta1
|
||||||
|
kind: ExternalSecret
|
||||||
|
metadata:
|
||||||
|
name: velero-ui-secret
|
||||||
|
namespace: velero
|
||||||
|
spec:
|
||||||
|
refreshInterval: 1h
|
||||||
|
secretStoreRef:
|
||||||
|
kind: ClusterSecretStore
|
||||||
|
name: vault-backend
|
||||||
|
target:
|
||||||
|
name: velero-ui-secret
|
||||||
|
creationPolicy: Owner
|
||||||
|
data:
|
||||||
|
- secretKey: username
|
||||||
|
remoteRef:
|
||||||
|
key: cluster-infrastructure/velero
|
||||||
|
property: UI_USERNAME
|
||||||
|
- secretKey: password
|
||||||
|
remoteRef:
|
||||||
|
key: cluster-infrastructure/velero
|
||||||
|
property: UI_PASSWORD
|
||||||
|
|
||||||
Reference in New Issue
Block a user