We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
worked with following config
module "vault-secrets-setup" { source = "../../vault-base-setup/" kubeconfig_path = "/home/sthings/.kube/itnovative" vault_addr = "https://vault.itnovative.sthings-vsphere.labul.sva.de" createDefaultAdminPolicy = true csi_enabled = true vso_enabled = true cluster_name = "itnovative" enableApproleAuth = false secret_engines = [ { path = "apps" name = "demo" description = "minio app secrets" data_json = <<EOT { "accessKey": "this", "secretKey": "andThat" } EOT } ] kv_policies = [ { name = "read-demo" capabilities = <<EOF path "apps/data/demo" { capabilities = ["read"] } path "apps/metadata/demo" { capabilities = ["read"] } EOF } ] k8s_auths = [ { name = "dev" namespace = "default" token_policies = ["read-demo"] token_ttl = 3600 } ] }
sthings@itnovative-2:/etc/rancher/rke2$ kubectl get vaultauth -o yaml spec: kubernetes: role: dev serviceAccount: dev tokenExpirationSeconds: 600 method: kubernetes mount: itnovative-dev vaultConnectionRef: dev status: error: "" valid: true kind: List metadata: resourceVersion: ""
apiVersion: v1 items: - apiVersion: secrets.hashicorp.com/v1beta1 kind: VaultStaticSecret metadata: name: vault-static-apps1 namespace: default spec: destination: create: true name: vso-app hmacSecretData: true mount: apps path: demo refreshAfter: 10s type: kv-v2 vaultAuthRef: dev status: lastGeneration: 1 secretMAC: pum81pv25FgD68B7FbJR5iMNX3BkrGR5hq2m6lZw0jA= kind: List metadata: resourceVersion: ""
The text was updated successfully, but these errors were encountered:
patrick-hermann-sva
No branches or pull requests
worked with following config
The text was updated successfully, but these errors were encountered: