Skip to content

Instantly share code, notes, and snippets.

env:
- name: DB_PASS
value: "vault:DB_PASS"
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: tester
namespace: default
---
apiVersion: apps/v1
kind: Deployment
metadata:
@innovia
innovia / vault-gke-values.yaml
Last active June 16, 2020 19:19
Vault GKE Values
global:
tlsDisable: false
server:
# resources:
# requests:
# memory: 256Mi
# cpu: 250m
# limits:
# memory: 256Mi
apiVersion: networking.gke.io/v1beta1
kind: ManagedCertificate
metadata:
name: vault-ui-certificate
spec:
domains:
- vault.domain.com
apiVersion: cloud.google.com/v1beta1
kind: BackendConfig
metadata:
name: config-default
spec:
iap:
enabled: true
oauthclientCredentials:
secretName: my-secret
@innovia
innovia / pod.yaml
Created March 19, 2020 21:12
vault annotation for secrets-consumer-webhook
annotations:
vault.security/enabled: "true"
vault.security/vault-addr: "https://vault.default.svc.cluster.local:8200"
vault.security/vault-role: "some-role"
vault.security/vault-path: "secret_v1/service/"
vault.security/vault-tls-secret-name: "vault-consul-ca"
vault.security/vault-use-secret-names-as-keys: "true"
@innovia
innovia / pget.go
Created June 10, 2020 16:47 — forked from montanaflynn/pget.go
Bounded Parallel Get Requests in Golang
package main
import (
"fmt"
"net/http"
"sort"
"time"
)
// a struct to hold the result from each request including an index