adam
0f0bdf4f6c
Prereqs verified on the cluster: VSO 1.3.0 (transformation supported, openbao-kubernetes VaultAuth healthy), MQTT egress to 10.5.30.3:1883 reachable from a pod, target nodes untainted, registry requires auth. Add registry-cred-vaultstaticsecret.yaml (secret/registry/nexus -> dockerconfigjson, mirroring existing cluster pattern) and wire imagePullSecrets into the DaemonSet. README updated with verified prereqs + apply order.
19 lines
606 B
YAML
19 lines
606 B
YAML
# Image pull secret for docker.adamksmith.xyz, synced by VSO from OpenBao.
|
|
# Mirrors the cluster's existing *-registry-cred pattern (secret/registry/nexus
|
|
# -> dockerconfigjson). Referenced as imagePullSecrets in the DaemonSet.
|
|
apiVersion: secrets.hashicorp.com/v1beta1
|
|
kind: VaultStaticSecret
|
|
metadata:
|
|
name: docker-registry-cred
|
|
namespace: jbod-monitor
|
|
spec:
|
|
vaultAuthRef: vault-secrets-operator-system/openbao-kubernetes
|
|
mount: secret
|
|
path: registry/nexus
|
|
type: kv-v2
|
|
refreshAfter: 1h
|
|
destination:
|
|
name: docker-registry-cred
|
|
create: true
|
|
type: kubernetes.io/dockerconfigjson
|