ce7cb702218693d08ea6d83464d2457c9250027c

This commit is contained in:
ms2k 2026-11-12 20:46:28 +09:00
commit 34c5f8963c

71
vendor/platform/dragonfly/vso.yaml vendored Normal file
View file

@ -0,0 +1,71 @@
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultAuth
metadata:
name: default
namespace: dragonfly
spec:
method: kubernetes
mount: kubernetes
kubernetes:
role: dragonfly
serviceAccount: dragonfly-vso
vaultConnectionRef: vault/vault
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
name: quay-acl
namespace: dragonfly
spec:
type: kv-v2
mount: secret
path: dragonfly/quay/acl
destination:
name: quay-acl
create: true
refreshAfter: 1h
vaultAuthRef: default
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
name: forgejo-acl
namespace: dragonfly
spec:
type: kv-v2
mount: secret
path: dragonfly/forgejo/acl
destination:
name: forgejo-acl
create: true
vaultAuthRef: default
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
name: forgejo-public-acl
namespace: dragonfly
spec:
type: kv-v2
mount: secret
path: dragonfly/forgejo-public/acl
destination:
name: forgejo-public-acl
create: true
vaultAuthRef: default
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
name: stalwart-acl
namespace: dragonfly
spec:
type: kv-v2
mount: secret
path: dragonfly/stalwart/acl
destination:
name: stalwart-acl
create: true
refreshAfter: 1h
vaultAuthRef: default