coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Move reuse secrets to local OpenBao
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
codex 2026-08-03 21:26:05 +02:00
parent ce5e908011
commit 33b36e801d
1 changed files with 5 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

9
argocd/platform-addons/openbao-secretstore/openbao-reuse.clustersecretstore.yaml
View file

@ -1,5 +1,6 @@
# Interim: reuse-surface on railiance01 reads runtime secrets from coulombcore OpenBao # reuse-surface uses the private OpenBao service on railiance01. Public
# (https://bao.coulomb.social) until railiance01 OpenBao is bootstrapped (Wave 7). # bao.coulomb.social remains the operator/API address and is not a workload
# runtime dependency.
# #
# Prereq: Secret external-secrets/openbao-reuse-eso-token (key: token) with a # Prereq: Secret external-secrets/openbao-reuse-eso-token (key: token) with a
# policy-limited OpenBao token that can read # policy-limited OpenBao token that can read
@ -15,7 +16,7 @@ metadata:
spec: spec:
provider: provider:
vault: vault:
server: https://bao.coulomb.social server: http://openbao.openbao.svc:8200
path: platform path: platform
version: v2 version: v2
auth: auth:
@ -25,4 +26,4 @@ spec:
key: token key: token
conditions: conditions:
- namespaces: - namespaces:
- reuse - reuse