20 lines
471 B
YAML

apiVersion: external-secrets.io/v1beta1
kind: ClusterSecretStore
metadata:
name: vault-cicd
annotations:
argocd.argoproj.io/sync-wave: "0"
spec:
provider:
vault:
server: "http://vault.dev-tools.svc.cluster.local:8200"
path: "cicd"
version: "v2"
auth:
kubernetes:
mountPath: "kubernetes"
role: "eso-cicd"
serviceAccountRef:
name: "external-secrets"
namespace: "dev-tools"