29 lines
956 B
YAML
29 lines
956 B
YAML
apiVersion: secrets.hashicorp.com/v1beta1
|
|
kind: VaultStaticSecret
|
|
metadata:
|
|
name: oauth2-proxy-secrets
|
|
spec:
|
|
vaultAuthRef: vault-auth-auth-platform
|
|
mount: secret
|
|
path: oauth2-proxy/forward-auth
|
|
refreshAfter: 60s
|
|
type: kv-v2
|
|
destination:
|
|
name: oauth2-proxy-secrets
|
|
create: true
|
|
overwrite: true
|
|
labels:
|
|
app.kubernetes.io/name: oauth2-proxy
|
|
app.kubernetes.io/component: auth-proxy
|
|
app.kubernetes.io/managed-by: vault-secrets-operator
|
|
transformation:
|
|
excludeRaw: true
|
|
templates:
|
|
client-secret:
|
|
text: '{{ if index .Secrets "client_secret" }}{{ index .Secrets "client_secret" }}{{ else }}{{ index .Secrets "client-secret" }}{{ end }}'
|
|
cookie-secret:
|
|
text: '{{ if index .Secrets "cookie_secret" }}{{ index .Secrets "cookie_secret" }}{{ else }}{{ index .Secrets "cookie-secret" }}{{ end }}'
|
|
rolloutRestartTargets:
|
|
- kind: Deployment
|
|
name: oauth2-proxy
|