0

I've deployed the external secrets operator https://github.com/external-secrets/external-secrets and Hashicorp vault in the same cluster via helm.

I've authenticated externalsecrets to vault using the root token. In the docs, I'm not able to find a way to fetch all secrets (all key/value pairs) within a given path. Earlier I was using kubernetes external secrets which is deprecated now.

KES had a very easy way to fetch all secrets

apiVersion: "kubernetes-client.io/v1"
kind: ExternalSecret
metadata:
  name: secrets
  namespace: secrets
spec:
  backendType: secretsManager
  dataFrom:
    - secrets
 

With KES, we were using AWS Secrets Manager as a backend but with ESO we are using vault as backend. This is what I'm using but it isn't working

apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: vault-example
spec:
  refreshInterval: "15s"
  secretStoreRef:
    name: vault-backend
    kind: SecretStore
  data:
  - secretKey: test
    remoteRef:
      key: kv/test-secret

On describing the secrets, I'm seeing this:

    Name:  vault-backend
Status:
  Conditions:
    Last Transition Time:  2022-05-19T05:49:54Z
    Message:               could not get secret data from provider
    Reason:                SecretSyncedError
    Status:                False
    Type:                  Ready
Events:
  Type     Reason        Age                      From              Message
  ----     ------        ----                     ----              -------
  Warning  UpdateFailed  3m21s (x543 over 4h33m)  external-secrets  secret not found

This is the doc for ESO if anyone wants to take a look:

https://external-secrets.io/v0.5.3/provider-hashicorp-vault/

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.