Skip to content

Commit 4057125

Browse files
chore: add example for hashicorp cloud dedicated
1 parent f9d3053 commit 4057125

File tree

2 files changed

+62
-0
lines changed

2 files changed

+62
-0
lines changed
Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
---
2+
apiVersion: v1
3+
kind: Secret
4+
metadata:
5+
name: ggscout-secrets
6+
stringData:
7+
HASHICORP_VAULT_TOKEN: "your_vault_token"
8+
9+
GITGUARDIAN_API_KEY: "your_gitguardian_token"
Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
---
2+
# yaml-language-server: $schema=../../values.schema.json
3+
4+
inventory:
5+
config:
6+
sources:
7+
hashicorpvault:
8+
type: hashicorpvault
9+
vault_address: "https://your-vault-address-here.com"
10+
auth:
11+
auth_mode: "token"
12+
token: "${HASHICORP_VAULT_TOKEN}"
13+
fetch_all_versions: true # Fetch all versions of secrets or not
14+
mode: "read/write" # Can be `read`, `write` or `read/write` depending on wether fetch and/or sync are enabled
15+
# Namespace filtering example for HashiCorp Vault Cloud Dedicated
16+
# Include all secrets from the 'admin' namespace, 'kv' mount, under 'my_app' path
17+
include:
18+
- resource_ids:
19+
- "admin/kv/my_app/*"
20+
# Include secrets from multiple namespaces
21+
# include:
22+
# - resource_ids:
23+
# - "admin/kv/*"
24+
# - "dev/secrets/*"
25+
# - "prod/database/*"
26+
# Exclude test secrets from all namespaces
27+
# exclude:
28+
# - resource_ids:
29+
# - "*/test/*"
30+
# - "*/temp/*"
31+
# To upload, set the gitguardian URL and tokens. Ensure the endpoint path ends with /v1
32+
# This is optional: omit this to prevent uploading and to only test collection.
33+
gitguardian:
34+
endpoint: "https://my-gg-instance/v1"
35+
api_token: "${GITGUARDIAN_API_KEY}"
36+
jobs:
37+
# Job to fetch defined sources
38+
fetch:
39+
# Set to `false` to disable the job
40+
enabled: true
41+
# Run every 15 minutes
42+
schedule: '*/15 * * * *'
43+
send: true
44+
# Job to be able to sync/write secrets from GitGuardian into you vault
45+
sync:
46+
# Set to `false` to disable the job
47+
enabled: true
48+
# Run every minute
49+
schedule: '* * * * *'
50+
51+
envFrom:
52+
- secretRef:
53+
name: ggscout-secrets

0 commit comments

Comments
 (0)