feat: add Maidn delivery pipeline

This commit is contained in:
Maidn 2026-09-16 12:07:14 +02:00
parent 46fbf780a1
commit fbe21e82ab
2 changed files with 90 additions and 0 deletions

View file

@ -0,0 +1,4 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- secret-access.yaml

86
.maidn/secret-access.yaml Normal file
View file

@ -0,0 +1,86 @@
apiVersion: v1
kind: ServiceAccount
metadata:
name: maidn-maidn-e2e-secret-runtime-staging
namespace: staging
---
apiVersion: external-secrets.io/v1
kind: SecretStore
metadata:
name: openbao-maidn-e2e-secret-runtime-staging
namespace: staging
spec:
provider:
vault:
server: http://openbao.openbao.svc:8200
path: secret
version: v2
auth:
kubernetes:
mountPath: kubernetes
role: maidn-maidn-e2e-secret-runtime-staging
serviceAccountRef:
name: maidn-maidn-e2e-secret-runtime-staging
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: maidn-e2e-secret-runtime-staging
namespace: staging
spec:
refreshInterval: 1h
secretStoreRef:
kind: SecretStore
name: openbao-maidn-e2e-secret-runtime-staging
target:
name: maidn-e2e-secret-runtime-staging
creationPolicy: Owner
data:
- secretKey: e2e-secret
remoteRef:
key: apps/maidn-e2e-secret/e2e-secret
property: value
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: maidn-maidn-e2e-secret-runtime-production
namespace: production
---
apiVersion: external-secrets.io/v1
kind: SecretStore
metadata:
name: openbao-maidn-e2e-secret-runtime-production
namespace: production
spec:
provider:
vault:
server: http://openbao.openbao.svc:8200
path: secret
version: v2
auth:
kubernetes:
mountPath: kubernetes
role: maidn-maidn-e2e-secret-runtime-production
serviceAccountRef:
name: maidn-maidn-e2e-secret-runtime-production
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: maidn-e2e-secret-runtime-production
namespace: production
spec:
refreshInterval: 1h
secretStoreRef:
kind: SecretStore
name: openbao-maidn-e2e-secret-runtime-production
target:
name: maidn-e2e-secret-runtime-production
creationPolicy: Owner
data:
- secretKey: e2e-secret
remoteRef:
key: apps/maidn-e2e-secret/e2e-secret
property: value
---