search

hashicorp / vault-secrets-operator

The Vault Secrets Operator (VSO) allows Pods to consume Vault secrets natively from Kubernetes Secrets.
https://hashicorp.com
Other
430 stars 89 forks source link

VaultAuth: extend the global ref API #800

Closed benashz closed 4 weeks ago

benashz commented 1 month ago

Extends the configuration options that can be applied during the VaultAuth+VaultAuthGlobal merger.

Examples:

---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultAuth
metadata:
  name: default
  namespace: vault-secrets-operator-system
spec:
  vaultAuthGlobalRef:
    mergeStrategy:
      headers: union
      params: union
    name: default
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultAuthGlobal
metadata:
  name: default
  namespace: vault-secrets-operator-system
spec:
  defaultAuthMethod: kubernetes
  kubernetes:
    audiences:
    - vault
    mount: demo-auth-mount
    namespace: demo-ns
    role: auth-role
    serviceAccount: default
    tokenExpirationSeconds: 600