gitadmin/devops-infra-argo-config-gcp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix for secret sa

Browse Source
This commit is contained in:
Mukul Sharma
2026-08-31 09:13:44 +05:30
parent 4719d0305f
commit c8bda77bd5
1 changed files with 10 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
values/incubator-infra-k8s-admin-prd-ase1-values.yaml
+10 -6
View File
@@ -73,12 +73,16 @@ appSpec:
chartDir: contour
valuesDir: contour
- name: external-secrets
# Fresh install, no existing release to adopt — no nameOverride
# needed. Replaces the Vault Agent Injector for pulling secrets into
# pods. This just brings the controller up; wiring a
# SecretStore/ClusterSecretStore to Vault as the actual backend is a
# separate step once this is healthy (needs a Kubernetes auth method
# enabled on the Vault side first).
# Correction from an earlier version of this file: "no nameOverride
# needed" was wrong. Without one, the Application (and therefore the
# Helm release name the chart templates with) becomes
# "external-secrets-admin-prd" — so the controller's ServiceAccount
# actually ends up named external-secrets-admin-prd, not
# external-secrets. secretstores/vault-backend.yaml's
# serviceAccountRef assumes the plain name, and Vault's role was bound
# to bound_service_account_names=external-secrets — both need this
# pinned name to match.
nameOverride: external-secrets
namespace: external-secrets
chartDir: external-secrets
valuesDir: external-secrets