File tree Expand file tree Collapse file tree 2 files changed +62
-0
lines changed
charts/ggscout/examples/hashicorpvaultclouddedicated Expand file tree Collapse file tree 2 files changed +62
-0
lines changed Original file line number Diff line number Diff line change
1
+ ---
2
+ apiVersion : v1
3
+ kind : Secret
4
+ metadata :
5
+ name : ggscout-secrets
6
+ stringData :
7
+ HASHICORP_VAULT_TOKEN : " your_vault_token"
8
+
9
+ GITGUARDIAN_API_KEY : " your_gitguardian_token"
Original file line number Diff line number Diff line change
1
+ ---
2
+ # yaml-language-server: $schema=../../values.schema.json
3
+
4
+ inventory :
5
+ config :
6
+ sources :
7
+ hashicorpvault :
8
+ type : hashicorpvault
9
+ vault_address : " https://your-vault-address-here.com"
10
+ auth :
11
+ auth_mode : " token"
12
+ token : " ${HASHICORP_VAULT_TOKEN}"
13
+ fetch_all_versions : true # Fetch all versions of secrets or not
14
+ mode : " read/write" # Can be `read`, `write` or `read/write` depending on wether fetch and/or sync are enabled
15
+ # Namespace filtering example for HashiCorp Vault Cloud Dedicated
16
+ # Include all secrets from the 'admin' namespace, 'kv' mount, under 'my_app' path
17
+ include :
18
+ - resource_ids :
19
+ - " admin/kv/my_app/*"
20
+ # Include secrets from multiple namespaces
21
+ # include:
22
+ # - resource_ids:
23
+ # - "admin/kv/*"
24
+ # - "dev/secrets/*"
25
+ # - "prod/database/*"
26
+ # Exclude test secrets from all namespaces
27
+ # exclude:
28
+ # - resource_ids:
29
+ # - "*/test/*"
30
+ # - "*/temp/*"
31
+ # To upload, set the gitguardian URL and tokens. Ensure the endpoint path ends with /v1
32
+ # This is optional: omit this to prevent uploading and to only test collection.
33
+ gitguardian :
34
+ endpoint : " https://my-gg-instance/v1"
35
+ api_token : " ${GITGUARDIAN_API_KEY}"
36
+ jobs :
37
+ # Job to fetch defined sources
38
+ fetch :
39
+ # Set to `false` to disable the job
40
+ enabled : true
41
+ # Run every 15 minutes
42
+ schedule : ' */15 * * * *'
43
+ send : true
44
+ # Job to be able to sync/write secrets from GitGuardian into you vault
45
+ sync :
46
+ # Set to `false` to disable the job
47
+ enabled : true
48
+ # Run every minute
49
+ schedule : ' * * * * *'
50
+
51
+ envFrom :
52
+ - secretRef :
53
+ name : ggscout-secrets
You can’t perform that action at this time.
0 commit comments