# Image pull secret for docker.adamksmith.xyz, synced by VSO from OpenBao.
# Mirrors the cluster's existing *-registry-cred pattern (secret/registry/nexus
# -> dockerconfigjson). Referenced as imagePullSecrets in the DaemonSet.
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultStaticSecret
metadata:
  name: docker-registry-cred
  namespace: jbod-monitor
spec:
  vaultAuthRef: vault-secrets-operator-system/openbao-kubernetes
  mount: secret
  path: registry/nexus
  type: kv-v2
  refreshAfter: 1h
  destination:
    name: docker-registry-cred
    create: true
    type: kubernetes.io/dockerconfigjson