vault: bootstrap k8s auth config with root token

2026-01-27 01:04:38 -03:00 · 2026-01-27 01:04:38 -03:00 · 9ecdf054d3
commit 9ecdf054d3
parent d9c8632b8d
1 changed files with 5 additions and 0 deletions
--- a/services/vault/k8s-auth-config-cronjob.yaml
+++ b/services/vault/k8s-auth-config-cronjob.yaml
@ -34,6 +34,11 @@ spec:
                  value: http://10.43.57.249:8200
                - name: VAULT_K8S_ROLE
                  value: vault-admin
+                - name: VAULT_TOKEN
+                  valueFrom:
+                    secretKeyRef:
+                      name: vault-init
+                      key: root_token
                - name: VAULT_K8S_TOKEN_REVIEWER_JWT_FILE
                  value: /var/run/secrets/vault-token-reviewer/token
                - name: VAULT_K8S_ROLE_TTL