From dfbedec41b5f615f44aacdda7f5cb1e26f4ff05f Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sat, 30 May 2026 23:06:47 +1000
Subject: [PATCH] Update apps/base/kanidm/vaultauth.yaml

Fix the VaultAuth object
---
 apps/base/kanidm/vaultauth.yaml | 13 +++++--------
 1 file changed, 5 insertions(+), 8 deletions(-)

diff --git a/apps/base/kanidm/vaultauth.yaml b/apps/base/kanidm/vaultauth.yaml
index de33b5c..70b6543 100644
--- a/apps/base/kanidm/vaultauth.yaml
+++ b/apps/base/kanidm/vaultauth.yaml
@@ -4,18 +4,15 @@ kind: VaultAuth
 metadata:
   name: default
   namespace: kanidm
-  labels:
-    app.kubernetes.io/name: kanidm
-    app.kubernetes.io/instance: kanidm
 spec:
-  method: kubernetes
-  mount: k8s/au/syd1
-  vaultConnectionRef: vso-system/default
   allowedNamespaces:
     - kanidm
   kubernetes:
-    role: default
-    serviceAccount: kanidm
     audiences:
       - vault
+    role: default
+    serviceAccount: default
     tokenExpirationSeconds: 600
+  method: kubernetes
+  mount: k8s/au/syd1
+  vaultConnectionRef: vso-system/default
\ No newline at end of file