SmokyZoneandCopilot
d174a0c666
When the ArgoCD release name is 'openbao' (same as the subchart name), Helm's fullname helper collapses '<release>-<chart>' to just the release name instead of appending '-openbao'. Our ClusterSecretStore and bootstrap Job hardcoded the '<release>-openbao' form, which pointed at a non-existent Service and made the ClusterSecretStore fail with 'unable to create client' / DNS lookup errors. Add a helper that replicates the subchart's fullname logic. Co-authored-by: Copilot <[email protected]>
21 lines
658 B
YAML
21 lines
658 B
YAML
apiVersion: external-secrets.io/v1
|
|
kind: ClusterSecretStore
|
|
metadata:
|
|
name: openbao
|
|
annotations:
|
|
# Give ESO + OpenBao time to become healthy before ArgoCD tries to sync this.
|
|
argocd.argoproj.io/sync-wave: "1"
|
|
spec:
|
|
provider:
|
|
vault:
|
|
server: "http://{{ include "openbao-gitops.openbaoFullname" . }}.{{ .Release.Namespace }}.svc:8200"
|
|
path: {{ .Values.eso.kvMountPath }}
|
|
version: v2
|
|
auth:
|
|
kubernetes:
|
|
mountPath: kubernetes
|
|
role: {{ .Values.eso.roleName }}
|
|
serviceAccountRef:
|
|
name: {{ .Values.eso.serviceAccountName }}
|
|
namespace: {{ .Values.eso.namespace }}
|