I've deployed the external secrets operator https://github.com/external-secrets/external-secrets and Hashicorp vault in the same cluster via helm.
I've authenticated externalsecrets to vault using the root token. In the docs, I'm not able to find a way to fetch all secrets (all key/value pairs) within a given path. Earlier I was using kubernetes external secrets which is deprecated now.
KES had a very easy way to fetch all secrets
apiVersion: "kubernetes-client.io/v1" kind: ExternalSecret metadata: name: secrets namespace: secrets spec: backendType: secretsManager dataFrom: - secrets
With KES, we were using AWS Secrets Manager as a backend but with ESO we are using vault as backend. This is what I'm using but it isn't working
apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: vault-example spec: refreshInterval: "15s" secretStoreRef: name: vault-backend kind: SecretStore data: - secretKey: test remoteRef: key: kv/test-secret
On describing the secrets, I'm seeing this:
Name: vault-backend Status: Conditions: Last Transition Time: 2022-05-19T05:49:54Z Message: could not get secret data from provider Reason: SecretSyncedError Status: False Type: Ready Events: Type Reason Age From Message ---- ------ ---- ---- ------- Warning UpdateFailed 3m21s (x543 over 4h33m) external-secrets secret not found
This is the doc for ESO if anyone wants to take a look: