2026-08-19 09:25:43 -04:00
|
|
|
apiVersion: external-secrets.io/v1
|
|
|
|
|
kind: ClusterSecretStore
|
|
|
|
|
metadata:
|
|
|
|
|
name: aws-secrets-manager
|
2026-08-19 10:22:23 -04:00
|
|
|
annotations:
|
|
|
|
|
argocd.argoproj.io/sync-wave: "2"
|
2026-08-19 09:25:43 -04:00
|
|
|
spec:
|
|
|
|
|
provider:
|
|
|
|
|
aws:
|
|
|
|
|
service: SecretsManager
|
|
|
|
|
region: {{ .Values.awsRegion }}
|
|
|
|
|
auth:
|
|
|
|
|
# Uses EC2 instance role via IMDS (instance metadata service)
|
|
|
|
|
# No credentials needed - the node role has secretsmanager:GetSecretValue
|
