FEAT(app): add Vault SecretStore for todo-dev
- Add SecretStore configuration - Enable Vault integration
This commit is contained in:
@@ -7,6 +7,7 @@ resources:
|
|||||||
- ../../base
|
- ../../base
|
||||||
- resourcequota.yaml
|
- resourcequota.yaml
|
||||||
- namespace.yaml
|
- namespace.yaml
|
||||||
|
- secretstore.yaml
|
||||||
- externalsecret.yaml
|
- externalsecret.yaml
|
||||||
|
|
||||||
commonLabels:
|
commonLabels:
|
||||||
@@ -15,7 +16,7 @@ commonLabels:
|
|||||||
# 이미지 태그 설정
|
# 이미지 태그 설정
|
||||||
images:
|
images:
|
||||||
- name: ghcr.io/mayne0213/todo
|
- name: ghcr.io/mayne0213/todo
|
||||||
newTag: develop-sha-741395c60d615ff33f6d36e712090cd9eebb2f01
|
newTag: develop-sha-430ec8255b5afa16943e8dc63525f8042b282d61
|
||||||
|
|
||||||
patchesStrategicMerge:
|
patchesStrategicMerge:
|
||||||
- deployment-patch.yaml
|
- deployment-patch.yaml
|
||||||
|
|||||||
16
deploy/k8s/overlays/dev/secretstore.yaml
Normal file
16
deploy/k8s/overlays/dev/secretstore.yaml
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
apiVersion: external-secrets.io/v1beta1
|
||||||
|
kind: SecretStore
|
||||||
|
metadata:
|
||||||
|
name: vault-backend
|
||||||
|
spec:
|
||||||
|
provider:
|
||||||
|
vault:
|
||||||
|
server: http://vault.vault.svc.cluster.local:8200
|
||||||
|
path: secret
|
||||||
|
version: v2
|
||||||
|
auth:
|
||||||
|
kubernetes:
|
||||||
|
mountPath: kubernetes
|
||||||
|
role: todo-dev
|
||||||
|
serviceAccountRef:
|
||||||
|
name: external-secrets
|
||||||
Reference in New Issue
Block a user