2022-03-22 20:59:01 +00:00
|
|
|
apiVersion: v1
|
|
|
|
|
kind: ServiceAccount
|
|
|
|
|
metadata:
|
|
|
|
|
# this service account was created by azwi
|
|
|
|
|
name: workload-identity-sa
|
|
|
|
|
annotations:
|
|
|
|
|
azure.workload.identity/client-id: 7d8cdf74-xxxx-xxxx-xxxx-274d963d358b
|
|
|
|
|
azure.workload.identity/tenant-id: 5a02a20e-xxxx-xxxx-xxxx-0ad5b634c5d8
|
|
|
|
|
---
|
|
|
|
|
apiVersion: external-secrets.io/v1beta1
|
|
|
|
|
kind: SecretStore
|
|
|
|
|
metadata:
|
2022-11-30 19:06:59 +00:00
|
|
|
name: azure-store
|
2022-03-22 20:59:01 +00:00
|
|
|
spec:
|
|
|
|
|
provider:
|
|
|
|
|
azurekv:
|
|
|
|
|
authType: WorkloadIdentity
|
|
|
|
|
vaultUrl: "https://xx-xxxx-xx.vault.azure.net"
|
|
|
|
|
serviceAccountRef:
|
|
|
|
|
name: workload-identity-sa
|
