I've deployed the external secrets operator https://github.com/external-secrets/external-secrets and Hashicorp vault in the same cluster via helm.
I've authenticated externalsecrets to vault using the root token. In the docs, I'm not able to find a way to fetch all secrets (all key/value pairs) within a given path. Earlier I was using kubernetes external secrets which is deprecated now.
KES had a very easy way to fetch all secrets
apiVersion: "kubernetes-client.io/v1"
kind: ExternalSecret
metadata:
name: secrets
namespace: secrets
spec:
backendType: secretsManager
dataFrom:
- secrets
With KES, we were using AWS Secrets Manager as a backend but with ESO we are using vault as backend. This is what I'm using but it isn't working
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: vault-example
spec:
refreshInterval: "15s"
secretStoreRef:
name: vault-backend
kind: SecretStore
data:
- secretKey: test
remoteRef:
key: kv/test-secret
On describing the secrets, I'm seeing this:
Name: vault-backend
Status:
Conditions:
Last Transition Time: 2022-05-19T05:49:54Z
Message: could not get secret data from provider
Reason: SecretSyncedError
Status: False
Type: Ready
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Warning UpdateFailed 3m21s (x543 over 4h33m) external-secrets secret not found
This is the doc for ESO if anyone wants to take a look:
https://external-secrets.io/v0.5.3/provider-hashicorp-vault/