New to KubeVault? Please start here.

mode.kubernetesSecret

To use kubernetesSecret mode specify mode.kubernetesSecret. In this mode, unseal keys and root token will be stored in a Kubernetes secret.

spec:
  unsealer:
    mode:
      kubernetesSecret:
        secretName: <secret_name>

mode.kubernetesSecret has the following fields:

kubernetesSecret.secretName

kubernetesSecret.secretName is a required field that specifies the name of the Kubernetes secret. If this secret does not exist, then Unsealer will create it. The secret will be created in the same namespace of VaultServer.

spec:
  unsealer:
    mode:
      kubernetesSecret:
        secretName: "vault-keys"