---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultAuth
metadata:
  name: default
  namespace: externaldns
spec:
  method: kubernetes
  mount: k8s/au/syd1
  vaultConnectionRef: vso-system/default
  allowedNamespaces:
    - externaldns
  kubernetes:
    role: externaldns
    serviceAccount: externaldns
    audiences:
      - vault
    tokenExpirationSeconds: 600