Browse Source

add documentation for TLS certs in SecretStore yaml.

Daniel Hix 4 years ago
parent
commit
5052f21b61
1 changed files with 11 additions and 0 deletions
  1. 11 0
      docs/snippets/full-secret-store.yaml

+ 11 - 0
docs/snippets/full-secret-store.yaml

@@ -43,7 +43,18 @@ spec:
       version: "v2"
       version: "v2"
       # vault enterprise namespace: https://www.vaultproject.io/docs/enterprise/namespaces
       # vault enterprise namespace: https://www.vaultproject.io/docs/enterprise/namespaces
       namespace: "a-team"
       namespace: "a-team"
+      # base64 encoded string of certificate
       caBundle: "..."
       caBundle: "..."
+      # Instead of caBundle you can also specify a caProvider
+      # this will retrieve the cert from a Secret or ConfigMap
+      caProvider:
+        # Can be Secret or ConfigMap
+        type: "Secret"
+        # This is optional, if not specified will be 'Default'
+        namespace: "my-cert-secret-namespace"
+        name: "my-cert-secret"
+        key: "cert-key"
+
       auth:
       auth:
         # static token: https://www.vaultproject.io/docs/auth/token
         # static token: https://www.vaultproject.io/docs/auth/token
         tokenSecretRef:
         tokenSecretRef: