Remove secret-seeding

This commit is contained in:
dvirlabs 2025-06-01 05:55:56 +03:00
parent f663e05a40
commit f2e8c3de3b
2 changed files with 0 additions and 49 deletions

View File

@ -1,20 +0,0 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: vault-secrets
namespace: argocd
spec:
project: dev-tools
source:
repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
targetRevision: HEAD
path: manifests/secret-seeding
directory:
recurse: true
destination:
server: https://kubernetes.default.svc
namespace: dev-tools
syncPolicy:
automated:
prune: true
selfHeal: true

View File

@ -1,29 +0,0 @@
apiVersion: batch/v1
kind: Job
metadata:
name: vault-seed-grafana-oidc
namespace: dev-tools
spec:
template:
spec:
restartPolicy: OnFailure
containers:
- name: seed
image: harbor.dvirlabs.com/dev-tools/vault:1.15.5-curl
command: ["/bin/sh", "-c"]
args:
- |
export VAULT_ADDR=http://vault.dev-tools.svc.cluster.local:8200
export VAULT_TOKEN=$(cat /vault/secrets/root-token)
vault kv put secret/grafana-oidc client_secret=6mfAtg8ZrioiCZMsbMi4dbZyJk205nRi
volumeMounts:
- name: vault-token
mountPath: /vault/secrets
readOnly: true
volumes:
- name: vault-token
secret:
secretName: vault-init
nodeSelector:
node-role.kubernetes.io/worker: "true"