Skip to content

Commit

Permalink
fix: Give ESO rights to push secrets in vault
Browse files Browse the repository at this point in the history
Signed-off-by: Chris Butler <[email protected]>
  • Loading branch information
butler54 committed May 17, 2024
1 parent 24790a6 commit 65d6ee7
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions common/ansible/roles/vault_utils/defaults/main.yml
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@
---
# defaults file for vault_utils
values_secret: "{{ lookup('env', 'HOME') }}/values-secret.yaml"
kubeconfig: "{{ lookup('env', 'KUBECONFIG') }}"
@@ -16,7 +15,7 @@ vault_hub_ttl: "15m"
vault_spoke_capabilities: '[\\\"read\\\"]'
vault_spoke_ttl: "15m"
vault_global_policy: global
vault_global_capabilities: '[\\\"read\\\"]'
vault_global_capabilities: '[\\\"create\\\",\\\"read\\\",\\\"update\\\",\\\"delete\\\"]'
external_secrets_ns: golang-external-secrets
external_secrets_sa: golang-external-secrets
external_secrets_secret: golang-external-secrets

0 comments on commit 65d6ee7

Please sign in to comment.