This commit is contained in:
Ian Keane 2026-08-19 10:54:03 -04:00
parent b196aff758
commit 0197e2ab42
4 changed files with 38 additions and 10 deletions

View file

@ -1,5 +1,5 @@
apiVersion: v2
name: external-secrets-config
description: ClusterSecretStore and supporting resources for ESO
description: ClusterSecretStore for AWS Secrets Manager via EC2 instance role
type: application
version: 0.1.0

View file

@ -1,14 +1,18 @@
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
name: selfsigned
namespace: external-secrets
spec:
selfSigned: {}
---
apiVersion: external-secrets.io/v1
kind: ClusterSecretStore
metadata:
name: aws-secrets-manager
annotations:
argocd.argoproj.io/sync-wave: "2"
spec:
provider:
aws:
service: SecretsManager
region: {{ .Values.awsRegion }}
auth:
# Uses EC2 instance role via IMDS (instance metadata service)
# No credentials needed - the node role has secretsmanager:GetSecretValue
region: us-east-1
# No auth block - uses EC2 instance role via AWS SDK default credential chain (IMDS)

View file

@ -1,5 +1,3 @@
# External Secrets Operator helm values
# Uses EC2 instance role for AWS auth - no credentials needed
installCRDs: true
certController: