Sébastien Han
18a4047679
Rook cluster-wide encryption can now use the native Kubernetes authentication to interact with vault KMS instead of using the token method. Signed-off-by: Sébastien Han <seb@redhat.com>
15 lines
452 B
YAML
15 lines
452 B
YAML
spec:
|
|
security:
|
|
kms:
|
|
connectionDetails:
|
|
KMS_PROVIDER: vault
|
|
VAULT_ADDR: https://vault.default.svc.cluster.local:8200
|
|
VAULT_BACKEND_PATH: rook/ver1
|
|
VAULT_SECRET_ENGINE: kv
|
|
VAULT_SKIP_VERIFY: "true"
|
|
VAULT_CLIENT_KEY: "vault-client-key"
|
|
VAULT_CLIENT_CERT: "vault-client-cert"
|
|
VAULT_CACERT: "vault-ca-cert"
|
|
VAULT_AUTH_METHOD: token
|
|
tokenSecretName: rook-vault-token
|