FEAT(app): add Vault SecretStore for todo-dev

- Add SecretStore configuration
- Enable Vault integration
This commit is contained in:
2025-12-12 15:25:25 +09:00
parent 4537de9079
commit 47c415439f
2 changed files with 18 additions and 1 deletions

View File

@@ -7,6 +7,7 @@ resources:
- ../../base - ../../base
- resourcequota.yaml - resourcequota.yaml
- namespace.yaml - namespace.yaml
- secretstore.yaml
- externalsecret.yaml - externalsecret.yaml
commonLabels: commonLabels:
@@ -15,7 +16,7 @@ commonLabels:
# 이미지 태그 설정 # 이미지 태그 설정
images: images:
- name: ghcr.io/mayne0213/todo - name: ghcr.io/mayne0213/todo
newTag: develop-sha-741395c60d615ff33f6d36e712090cd9eebb2f01 newTag: develop-sha-430ec8255b5afa16943e8dc63525f8042b282d61
patchesStrategicMerge: patchesStrategicMerge:
- deployment-patch.yaml - deployment-patch.yaml

View File

@@ -0,0 +1,16 @@
apiVersion: external-secrets.io/v1beta1
kind: SecretStore
metadata:
name: vault-backend
spec:
provider:
vault:
server: http://vault.vault.svc.cluster.local:8200
path: secret
version: v2
auth:
kubernetes:
mountPath: kubernetes
role: todo-dev
serviceAccountRef:
name: external-secrets