1
0
Fork 0
mirror of https://github.com/external-secrets/external-secrets.git synced 2024-12-14 11:57:59 +00:00

Update VaultAppRole documentation to show/use roleRef in its examples (#4035)

Signed-off-by: Mike Tougeron <tougeron@adobe.com>
Co-authored-by: Gustavo Fernandes de Carvalho <17139678+gusfcarvalho@users.noreply.github.com>
This commit is contained in:
Mike Tougeron 2024-11-05 01:08:01 -08:00 committed by GitHub
parent abd7b77611
commit 9113bced5b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 13 additions and 4 deletions

View file

@ -68,11 +68,16 @@ spec:
# AppRole auth: https://www.vaultproject.io/docs/auth/approle # AppRole auth: https://www.vaultproject.io/docs/auth/approle
appRole: appRole:
path: "approle" path: "approle"
roleId: "db02de05-fa39-4855-059b-67221c5c2f63" # Instead of referencing the AppRole's ID from the secret, you can also specify it directly
# roleId: "db02de05-fa39-4855-059b-67221c5c2f63"
roleRef:
name: "my-secret"
namespace: "secret-admin"
key: "vault-role-id"
secretRef: secretRef:
name: "my-secret" name: "my-secret"
namespace: "secret-admin" namespace: "secret-admin"
key: "vault-token" key: "vault-role-secret"
# Kubernetes auth: https://www.vaultproject.io/docs/auth/kubernetes # Kubernetes auth: https://www.vaultproject.io/docs/auth/kubernetes
kubernetes: kubernetes:

View file

@ -82,10 +82,14 @@ spec:
# AppRole auth: https://www.vaultproject.io/docs/auth/approle # AppRole auth: https://www.vaultproject.io/docs/auth/approle
appRole: appRole:
path: "approle" path: "approle"
roleId: "db02de05-fa39-4855-059b-67221c5c2f63" # Instead of referencing the AppRole's ID from the secret, you can also specify it directly
# roleId: "db02de05-fa39-4855-059b-67221c5c2f63"
roleRef:
name: "my-secret"
key: "vault-role-id"
secretRef: secretRef:
name: "my-secret" name: "my-secret"
key: "vault-token" key: "vault-role-secret"
# Kubernetes auth: https://www.vaultproject.io/docs/auth/kubernetes # Kubernetes auth: https://www.vaultproject.io/docs/auth/kubernetes
kubernetes: kubernetes: