crossplane-contrib / ess-plugin-vault Goto Github PK

What happened?

With regard to this plugin, so far it only authenticates via token and the latest code will have the option to authenticate with kubernetes service accout:

const (
      VaultAuthToken VaultAuthMethod = "Token"
      // VaultAuthKubernetes indicates that "Kubernetes Auth" will be used to
      // authenticate to Vault.
      // https://developer.hashicorp.com/vault/docs/auth/kubernetes
      VaultAuthKubernetes VaultAuthMethod = "Kubernetes"
  )

This avoids having to use the annotations found in the crossplane documentation. However, a version with this authentication method change has not yet been released.

How could Crossplane help solve your problem?

I would like to know if there is a release date for this update/release?

What environment did it happen in?

Crossplane version: 1.13.2

What happened?

I applied the chart es recommended but the pod is failing because of a missing secret:

MountVolume.SetUp failed for volume "certs" : secret "ess-server-certs" not found

How can we reproduce it?

cat > values.yaml <<EOF
podAnnotations:
  vault.hashicorp.com/agent-inject: "true"
  vault.hashicorp.com/agent-inject-token: "true"
  vault.hashicorp.com/role: crossplane
  vault.hashicorp.com/agent-run-as-user: "65532"
EOF

helm upgrade --install ess-plugin-vault oci://xpkg.upbound.io/crossplane-contrib/ess-plugin-vault --namespace crossplane-system -f values.yaml

What environment did it happen in?

Crossplane version: 1.13.1

What happened?

I want to add "Vault as an External Secret Store", however I'm stuck at adding "VaultConfig" as this kind does not exist on secrets.crossplane.io/v1alpha1.
kubectl api-resources | grep secrets.crossplane.io --> storeconfigs secrets.crossplane.io/v1alpha1 false StoreConfig

How can we reproduce it?

• add crossplane in your cluster
• kubectl api-resources | grep secrets.crossplane.io

What environment did it happen in?

Crossplane version: 1.12.1

PROBLEM FOUND: Argocd does somehow not deploy crds from oci registries.