Gabriel Radureau
8b1485e143
Adds VaultAuth + VaultStaticSecret + VaultDynamicSecret templates gated behind .Values.vault.enabled (default false). Default helm install keeps working in degraded mode. Chart becomes Vault-ready without activating Vault dependencies. iac/ terraform + Vault workflow follow as PR-IAC1 (requires user manual prereqs in Vault). Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
16 lines
364 B
YAML
16 lines
364 B
YAML
{{- if .Values.vault.enabled }}
|
|
apiVersion: secrets.hashicorp.com/v1beta1
|
|
kind: VaultAuth
|
|
metadata:
|
|
name: auth
|
|
namespace: {{ .Release.Namespace }}
|
|
spec:
|
|
method: kubernetes
|
|
mount: kubernetes
|
|
kubernetes:
|
|
role: {{ .Values.vault.role }}
|
|
serviceAccount: {{ include "dance-lessons-coach.serviceAccountName" . }}
|
|
audiences:
|
|
- vault
|
|
{{- end }}
|