Commit Graph

5 Commits

Author SHA1 Message Date
9419f7d4a3 security: switch ESO→Vault auth from token to k8s SA
Remove static Vault token from Git (was exposed in vault-token-secret.yaml).
ESO now authenticates via Kubernetes service account JWT → short-lived tokens.
Add sync-hook Job to configure Vault k8s auth idempotently on ArgoCD sync.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-22 13:08:21 +07:00
6e27e6ec5f rename folder 2026-04-12 22:41:31 +07:00
7190c2befe feat: configure External Secrets with Vault backend and enable Jenkins secret synchronization 2026-04-12 22:37:56 +07:00
bf97781fbc Remove namespaceOverride value from External Secrets Helm chart configuration in values.yaml. 2026-04-12 21:41:30 +07:00
26f8dd6b11 Remove ArgoCD certificate and key files; add External Secrets Helm chart with Bitwarden SDK server integration, including configuration files, templates, and monitoring dashboard. 2026-04-12 21:11:11 +07:00