ian/dumpnet-argo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add external secrets operator

Browse source
This commit is contained in:
Ian Keane 2026-08-19 09:25:43 -04:00
parent 3a5b7c2258
commit fe056fd9f9
6 changed files with 109 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
charts/external-secrets/Chart.yaml Normal file
View file

@ -0,0 +1,5 @@
apiVersion: v2
name: external-secrets-config
description: ClusterSecretStore for AWS Secrets Manager via EC2 instance role
type: application
version: 0.1.0

12
charts/external-secrets/templates/cluster-secret-store.yaml Normal file
View file

@ -0,0 +1,12 @@
apiVersion: external-secrets.io/v1
kind: ClusterSecretStore
metadata:
name: aws-secrets-manager
spec:
provider:
aws:
service: SecretsManager
region: {{ .Values.awsRegion }}
auth:
# Uses EC2 instance role via IMDS (instance metadata service)
# No credentials needed - the node role has secretsmanager:GetSecretValue

4
charts/external-secrets/values.yaml Normal file
View file

@ -0,0 +1,4 @@
# External Secrets Operator helm values
# https://external-secrets.io/latest/introduction/getting-started/
# Uses EC2 instance role for AWS auth - no credentials needed
installCRDs: true