up ver vault, add bank-vavult examples

This commit is contained in:
2025-01-27 14:25:50 +07:00
parent a6e9e7ca09
commit 55e333f0de
66 changed files with 2429 additions and 1595 deletions

View File

@@ -0,0 +1,73 @@
apiVersion: v1
kind: Namespace
metadata:
name: vault-test
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: vault
namespace: vault-test
---
apiVersion: v1
kind: Secret
metadata:
name: test-key-secret
namespace: vault-test
annotations:
vault.security.banzaicloud.io/vault-addr: "http://vault.vault.svc:8200"
vault.security.banzaicloud.io/vault-skip-verify: "true"
vault.security.banzaicloud.io/vault-path: "kubernetes"
stringData:
APPLE: vault:kv/data/myenvs#APPLE
type: Opaque
---
apiVersion: v1
kind: ConfigMap
metadata:
name: test-key-configmap
namespace: vault-test
annotations:
vault.security.banzaicloud.io/vault-addr: "http://vault.vault.svc:8200"
vault.security.banzaicloud.io/vault-skip-verify: "true"
vault.security.banzaicloud.io/vault-path: "kubernetes"
data:
BANANA: vault:kv/data/myenvs#BANANA
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: vault-test
namespace: vault-test
spec:
replicas: 1
selector:
matchLabels:
app.kubernetes.io/name: vault
template:
metadata:
labels:
app.kubernetes.io/name: vault
annotations:
vault.security.banzaicloud.io/vault-addr: "http://vault.vault.svc:8200"
vault.security.banzaicloud.io/vault-role: "vault-test"
vault.security.banzaicloud.io/vault-skip-verify: "true"
vault.security.banzaicloud.io/vault-path: "kubernetes"
vault.security.banzaicloud.io/vault-env-from-path: "kv/data/myenvs"
spec:
serviceAccountName: vault
containers:
- name: alpine
image: alpine
command: ["sh", "-c", "echo $BLUEBERRY && echo going to sleep... && sleep 10000"]
env:
- name: BLUEBERRY
value: vault:kv/data/myenvs#BLUEBERRY
- name: CARROT
value: vault:kv/data/myenvs#CARROT
- name: CUCUMBER
value: vault:kv/data/myenvs#CUCUMBER