NAME

IO::K8s::ExternalSecrets::V1::OpenBaoKubernetesAuth - Kubernetes authenticates with OpenBao by passing a ServiceAccount token to the [Kubernetes auth mechanism].

VERSION

version 1.108

path

Path where the Kubernetes authentication backend is mounted in OpenBao, e.g: "kubernetes"

role

A required field containing the OpenBao Role to assume. A Role binds a Kubernetes ServiceAccount with a set of OpenBao policies.

secretRef

Optional secret field containing a Kubernetes ServiceAccount JWT used for authenticating with OpenBao. If a name is specified without a key, `token` is the default.

serviceAccountRef

Optional service account field containing the name of a Kubernetes ServiceAccount. If the service account is specified, a token will be requested from the Kubernetes TokenRequest API for authenticating with OpenBao. Any configured audiences will be passed to the TokenRequest as-is.

SUPPORT

Issues

Please report bugs and feature requests on GitHub at https://github.com/pplu/io-k8s-p5/issues.

CONTRIBUTING

Contributions are welcome! Please fork the repository and submit a pull request.

AUTHORS

  • Torsten Raudssus <getty@cpan.org>

  • Jose Luis Martinez Torres <jlmartin@cpan.org>

COPYRIGHT AND LICENSE

This software is Copyright (c) 2018-2026 by Jose Luis Martinez Torres <jlmartin@cpan.org>.

This is free software, licensed under:

The Apache License, Version 2.0, January 2004