infra/controllers/vault-secrets-operator.yaml

@@ -0,0 +1,35 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: vault-secrets-operator
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: hashicorp
+  namespace: vault-secrets-operator
+spec:
+  interval: 24h
+  url: https://helm.releases.hashicorp.com
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: vault-secrets-operator
+  namespace: vault-secrets-operator
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: vault-secrets-operator
+      version: 0.10.0
+      sourceRef:
+        kind: HelmRepository
+        name: hashicorp
+        namespace: vault-secrets-operator
+      interval: 12h
+  values:
+    defaultVaultConnection:
+      enabled: true
+      address: "https://openbao.lumpiasty.xyz:8200"

infra/kustomization.yaml

@@ -11,6 +11,7 @@ resources:
   - controllers/k8up.yaml
   - controllers/openbao.yaml
   - controllers/external-secrets.yaml
+  - controllers/vault-secrets-operator.yaml
   - controllers/mongodb-operator.yaml
   - controllers/cloudnative-pg.yaml
   - diskpools/anapistula-delrosalae-hdd.yaml