Fix resources

manifests/cluster-secret-store/internal-users/bootstrap-job.yaml

@@ -74,23 +74,3 @@ spec:
                 bound_audiences="https://kubernetes.default.svc" \
                 policies="eso-internal-users-read" \
                 ttl=1h
----
-apiVersion: external-secrets.io/v1beta1
-kind: ClusterSecretStore
-metadata:
-  name: vault-internal-users
-  annotations:
-    argocd.argoproj.io/sync-wave: "0"
-spec:
-  provider:
-    vault:
-      server: "http://vault.dev-tools.svc.cluster.local:8200"
-      path: "internal-users"
-      version: "v2"
-      auth:
-        kubernetes:
-          mountPath: "kubernetes"
-          role: "eso-internal-users"
-          serviceAccountRef:
-            name: "external-secrets"
-            namespace: "dev-tools"

manifests/cluster-secret-store/internal-users/clustersecretstore.yaml

@@ -3,7 +3,7 @@ kind: ClusterSecretStore
 metadata:
   name: vault-internal-users
   annotations:
-    argocd.argoproj.io/sync-wave: "2"
+    argocd.argoproj.io/sync-wave: "0"
 spec:
   provider:
     vault:
@@ -12,8 +12,8 @@ spec:
       version: "v2"
       auth:
         kubernetes:
-          mountPath: "auth/kubernetes"
+          mountPath: "kubernetes"
           role: "eso-internal-users"
           serviceAccountRef:
-            name: external-secrets
+            name: "external-secrets"
-            namespace: dev-tools
+            namespace: "dev-tools"

manifests/cluster-secret-store/oidc/bootstrap-job.yaml

@@ -73,24 +73,4 @@ spec:
                 bound_service_account_namespaces="dev-tools" \
                 bound_audiences="https://kubernetes.default.svc" \
                 policies="eso-oidc-read" \
-                ttl=1h
+                ttl=1h
----
-apiVersion: external-secrets.io/v1beta1
-kind: ClusterSecretStore
-metadata:
-  name: vault-oidc-secrets
-  annotations:
-    argocd.argoproj.io/sync-wave: "0"
-spec:
-  provider:
-    vault:
-      server: "http://vault.dev-tools.svc.cluster.local:8200"
-      path: "oidc-secrets"
-      version: "v2"
-      auth:
-        kubernetes:
-          mountPath: "kubernetes"
-          role: "eso-oidc"
-          serviceAccountRef:
-            name: "external-secrets"
-            namespace: "dev-tools"

manifests/cluster-secret-store/oidc/clustersecretstore.yaml

@@ -3,7 +3,7 @@ kind: ClusterSecretStore
 metadata:
   name: vault-oidc-secrets
   annotations:
-    argocd.argoproj.io/sync-wave: "2"
+    argocd.argoproj.io/sync-wave: "0"
 spec:
   provider:
     vault:
@@ -12,8 +12,8 @@ spec:
       version: "v2"
       auth:
         kubernetes:
-          mountPath: "auth/kubernetes"
+          mountPath: "kubernetes"
           role: "eso-oidc"
           serviceAccountRef:
-            name: external-secrets
+            name: "external-secrets"
-            namespace: dev-tools
+            namespace: "dev-tools"

manifests/cluster-secret-store/vault-general-secrets/bootstrap-job.yaml

@@ -74,23 +74,4 @@ spec:
                 bound_audiences="https://kubernetes.default.svc" \
                 policies="eso-general-read" \
                 ttl=1h
----
+
-apiVersion: external-secrets.io/v1beta1
-kind: ClusterSecretStore
-metadata:
-  name: vault-general-secrets
-  annotations:
-    argocd.argoproj.io/sync-wave: "0"
-spec:
-  provider:
-    vault:
-      server: "http://vault.dev-tools.svc.cluster.local:8200"
-      path: "general-secrets"
-      version: "v2"
-      auth:
-        kubernetes:
-          mountPath: "kubernetes"
-          role: "eso-general"
-          serviceAccountRef:
-            name: "external-secrets"
-            namespace: "dev-tools"

manifests/cluster-secret-store/vault-general-secrets/clustersecretstore.yaml

@@ -3,7 +3,7 @@ kind: ClusterSecretStore
 metadata:
   name: vault-general-secrets
   annotations:
-    argocd.argoproj.io/sync-wave: "2"
+    argocd.argoproj.io/sync-wave: "0"
 spec:
   provider:
     vault:
@@ -12,8 +12,8 @@ spec:
       version: "v2"
       auth:
         kubernetes:
-          mountPath: "auth/kubernetes"
+          mountPath: "kubernetes"
           role: "eso-general"
           serviceAccountRef:
-            name: external-secrets
+            name: "external-secrets"
-            namespace: dev-tools
+            namespace: "dev-tools"