Add external secrets operator

This commit is contained in:
Ian Keane 2026-08-19 09:25:43 -04:00
parent 3a5b7c2258
commit fe056fd9f9
6 changed files with 109 additions and 0 deletions

View file

@ -0,0 +1,12 @@
apiVersion: external-secrets.io/v1
kind: ClusterSecretStore
metadata:
name: aws-secrets-manager
spec:
provider:
aws:
service: SecretsManager
region: {{ .Values.awsRegion }}
auth:
# Uses EC2 instance role via IMDS (instance metadata service)
# No credentials needed - the node role has secretsmanager:GetSecretValue