From b466b3073bbca05b2618aac9aab2b93204bea3b9 Mon Sep 17 00:00:00 2001 From: Sheen Capadngan Date: Fri, 29 Nov 2024 21:09:37 +0800 Subject: [PATCH] misc: updated snippet to be copy+paste friendly --- docs/integrations/platforms/kubernetes-csi.mdx | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) diff --git a/docs/integrations/platforms/kubernetes-csi.mdx b/docs/integrations/platforms/kubernetes-csi.mdx index 0c13754e7..8bc15811b 100644 --- a/docs/integrations/platforms/kubernetes-csi.mdx +++ b/docs/integrations/platforms/kubernetes-csi.mdx @@ -54,12 +54,19 @@ helm repo add secrets-store-csi-driver https://kubernetes-sigs.github.io/secrets ```bash helm install csi secrets-store-csi-driver/secrets-store-csi-driver \ --namespace=kube-system \ ---set "tokenRequests[0].audience=infisical" \ # Configure authentication for the CSI provider ---set enableSecretRotation=true \ # Enable automatic secret updates from Infisical ---set rotationPollInterval=2m \ # Check for secret updates every 2 minutes ---set "syncSecret.enabled=true" \ # Enable syncing secrets to Kubernetes secrets (optional) +--set "tokenRequests[0].audience=infisical" \ +--set enableSecretRotation=true \ +--set rotationPollInterval=2m \ +--set "syncSecret.enabled=true" \ ``` +The flags configure the following: + +- `tokenRequests[0].audience=infisical`: Configures authentication for the CSI provider (required) +- `enableSecretRotation=true`: Enables automatic secret updates from Infisical +- `rotationPollInterval=2m`: Checks for secret updates every 2 minutes +- `syncSecret.enabled=true`: Enables syncing secrets to Kubernetes secrets (optional) + If you do not wish to use the secret rotation feature of the secrets store CSI driver, you can omit the `enableSecretRotation` and the `rotationPollInterval` flags. Do note that by default, secrets from Infisical are only fetched and mounted during pod creation. If there are any changes made to the secrets in Infisical, they will not propagate to the pods unless secret rotation is enabled for the CSI driver.