ricoberger / vault-secrets-operator

Create Kubernetes secrets from Vault for a secure GitOps based workflow.
MIT License
633 stars 103 forks source link

Restrict Operator to Vault Namespace #246

Closed ricoberger closed 10 months ago

ricoberger commented 10 months ago

It is now possible to restrict the operator to a specific Vault Namespace. When the VAULT_RESTRICT_NAMESPACE environment variable is set to true the operator only reconciles secrets where the spec.vaultNamespace field is the same as the VAULT_NAMESPACE environment variable. VaultSecrets with another spec.vaultNamespace value will be ignored.

When this feature is enabled the operator can not be used with nested Vault Namespaces.

Closes #234