FEAT(velero): add velero and falco UI auth
- secrets from Vault
This commit is contained in:
@@ -40,7 +40,9 @@ spec:
|
||||
|
||||
# Environment variables
|
||||
env: []
|
||||
envFrom: []
|
||||
envFrom:
|
||||
- secretRef:
|
||||
name: velero-ui-secret
|
||||
|
||||
# Pod security context
|
||||
podSecurityContext:
|
||||
|
||||
@@ -7,4 +7,5 @@ resources:
|
||||
|
||||
# Velero credentials from Vault
|
||||
- external-secret.yaml
|
||||
- vault/velero-ui-secret.yaml
|
||||
- ingress/velero-ui-ingress.yaml
|
||||
|
||||
23
velero/vault/velero-ui-secret.yaml
Normal file
23
velero/vault/velero-ui-secret.yaml
Normal file
@@ -0,0 +1,23 @@
|
||||
apiVersion: external-secrets.io/v1beta1
|
||||
kind: ExternalSecret
|
||||
metadata:
|
||||
name: velero-ui-secret
|
||||
namespace: velero
|
||||
spec:
|
||||
refreshInterval: 1h
|
||||
secretStoreRef:
|
||||
kind: ClusterSecretStore
|
||||
name: vault-backend
|
||||
target:
|
||||
name: velero-ui-secret
|
||||
creationPolicy: Owner
|
||||
data:
|
||||
- secretKey: username
|
||||
remoteRef:
|
||||
key: cluster-infrastructure/velero
|
||||
property: UI_USERNAME
|
||||
- secretKey: password
|
||||
remoteRef:
|
||||
key: cluster-infrastructure/velero
|
||||
property: UI_PASSWORD
|
||||
|
||||
Reference in New Issue
Block a user