install immich

vault/kubernetes-roles/immich.yaml

@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - immich-password
+bound_service_account_namespaces:
+  - immich
+token_policies:
+  - immich

vault/policy/immich.hcl

@@ -0,0 +1,4 @@
+
+path "secret/data/immich-db" {
+    capabilities = ["read"]
+}