cw-infra-apps/vault-secrets-operator/templates/default-vault-auth-method.yaml

32 lines
1.1 KiB
YAML

{{- /*
# Copyright (c) HashiCorp, Inc.
# SPDX-License-Identifier: BUSL-1.1
*/ -}}
{{- if .Values.defaultAuthMethod.enabled }}
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultAuth
metadata:
name: default
namespace: {{ .Release.Namespace }}
labels:
control-plane: controller-manager
component: controller-manager
app.kubernetes.io/component: controller-manager
{{- include "vso.chart.labels" . | nindent 4 }}
spec:
namespace: {{ .Values.defaultAuthMethod.namespace }}
{{- if .Values.defaultAuthMethod.allowedNamespaces }}
allowedNamespaces:
{{- toYaml .Values.defaultAuthMethod.allowedNamespaces | nindent 4 }}
{{- end }}
method: {{ .Values.defaultAuthMethod.method }}
mount: {{ .Values.defaultAuthMethod.mount }}
{{- $kubeServiceAccount := .Values.defaultAuthMethod.kubernetes.serviceAccount }}
{{- include "vso.vaultAuthMethod" (list .Values.defaultAuthMethod $kubeServiceAccount . ) }}
{{- if .Values.defaultAuthMethod.vaultAuthGlobalRef.enabled }}
vaultAuthGlobalRef:
{{- include "vso.vaultAuthGlobalRef" . }}
{{- end }}
{{- end }}