Closed maaft closed 3 months ago
It seems to be configurable by creating a secret like this:
apiVersion: v1
kind: Secret
metadata:
name: config-from-secret
labels:
app.kubernetes.io/name: vault-configurator
vault_cr: vault
data:
vault-config.yml: cG9saWNpZXM6CiAgLSBuYW1lOiBhbGxvd19hY2Nlc3NfdG9fc2VjcmV0c19mcm9tX3NlY3JldAogICAgcnVsZXM6IHBhdGggInNlY3JldC8qIiB7CiAgICAgIGNhcGFiaWxpdGllcyA9IFsiY3JlYXRlIiwgInJlYWQiLCAidXBkYXRlIiwgImRlbGV0ZSIsICJsaXN0Il0KICAgICAgfQoK
Can this please be documented? It's very obscure process and super hard to find.
Preflight Checklist
Problem Description
Currently, backend secrets have to be directly inserted into Vault CRD. Example:
This makes it impossible to push these CRDs to git.
Proposed Solution
There should be an option to specify the config from a k8s secret, like this:
Alternatives Considered
No response
Additional Information
No response