FEAT(app): add Vault SecretStore for todo-dev
- Add SecretStore configuration - Enable Vault integration
This commit is contained in:
@@ -7,6 +7,7 @@ resources:
|
||||
- ../../base
|
||||
- resourcequota.yaml
|
||||
- namespace.yaml
|
||||
- secretstore.yaml
|
||||
- externalsecret.yaml
|
||||
|
||||
commonLabels:
|
||||
@@ -15,7 +16,7 @@ commonLabels:
|
||||
# 이미지 태그 설정
|
||||
images:
|
||||
- name: ghcr.io/mayne0213/todo
|
||||
newTag: develop-sha-741395c60d615ff33f6d36e712090cd9eebb2f01
|
||||
newTag: develop-sha-430ec8255b5afa16943e8dc63525f8042b282d61
|
||||
|
||||
patchesStrategicMerge:
|
||||
- deployment-patch.yaml
|
||||
|
||||
16
deploy/k8s/overlays/dev/secretstore.yaml
Normal file
16
deploy/k8s/overlays/dev/secretstore.yaml
Normal file
@@ -0,0 +1,16 @@
|
||||
apiVersion: external-secrets.io/v1beta1
|
||||
kind: SecretStore
|
||||
metadata:
|
||||
name: vault-backend
|
||||
spec:
|
||||
provider:
|
||||
vault:
|
||||
server: http://vault.vault.svc.cluster.local:8200
|
||||
path: secret
|
||||
version: v2
|
||||
auth:
|
||||
kubernetes:
|
||||
mountPath: kubernetes
|
||||
role: todo-dev
|
||||
serviceAccountRef:
|
||||
name: external-secrets
|
||||
Reference in New Issue
Block a user