mirrors/ceph-csi
1
0
Fork 0
mirror of https://github.com/ceph/ceph-csi.git synced 2025-06-13 10:33:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

doc: add example for Tenant ServiceAccount

Browse Source 
The ServiceAccount "ceph-csi-vault-sa" is expected to be placed in the
Namespace "tenant" so that the provisioner and node-plugin fetch the
ServiceAccount from a Namespace where Ceph-CSI is not deployed.

Signed-off-by: Niels de Vos <ndevos@redhat.com>
This commit is contained in:
Niels de Vos
2021-07-06 10:32:12 +02:00
committed by mergify[bot]
parent 8662e01d2c
commit b700fa43e6
4 changed files with 144 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
examples/kms/vault/csi-kms-connection-details.yaml
View File

@ -31,6 +31,13 @@ data:
"VAULT_BACKEND_PATH": "secret",
"VAULT_SKIP_VERIFY": "true"
}
vault-tenant-sa-test: |-
{
"KMS_PROVIDER": "vaulttenantsa",
"VAULT_ADDR": "http://vault.default.svc.cluster.local:8200",
"VAULT_BACKEND_PATH": "shared-secrets",
"VAULT_SKIP_VERIFY": "true"
}
secrets-metadata-test: |-
{
"encryptionKMSType": "metadata"