move ovh cert-manager secret to vault

2025-05-17 23:12:42 +02:00
parent 8251d8088a
commit f670536eeb
4 changed files with 48 additions and 0 deletions
--- a/vault/kubernetes-roles/cert-manager.yaml
+++ b/vault/kubernetes-roles/cert-manager.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - ovh-credentials
+bound_service_account_namespaces:
+  - cert-manager
+token_policies:
+  - ovh-credentials
--- a/vault/policy/ovh-credentials.hcl
+++ b/vault/policy/ovh-credentials.hcl
@@ -0,0 +1,3 @@
+path "secret/data/ovh-cert-manager" {
+    capabilities = ["read"]
+}