feat: manage postgres-credentials for artifactapi3

pull credentials for postgres/cnpg from vault
2026-06-21 17:23:50 +10:00
parent 349dc5fd01
commit bbf7bd7d8b
2 changed files with 18 additions and 1 deletions
@@ -32,3 +32,20 @@ spec:
  refreshAfter: 5m
  type: kv-v2
  vaultAuthRef: default
+---
+apiVersion: secrets.hashicorp.com/v1beta1
+kind: VaultStaticSecret
+metadata:
+  name: postgres-credentials
+  namespace: puppet
+spec:
+  destination:
+    create: true
+    name: postgres-credentials
+    overwrite: true
+  hmacSecretData: true
+  mount: kv
+  path: service/artifactapi/postgres-credentials
+  refreshAfter: 5m
+  type: kv-v2
+  vaultAuthRef: default