awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-06 16:27:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

misc: updated snippet to be copy+paste friendly

Browse Source
This commit is contained in:
Sheen Capadngan
2024-11-29 21:09:37 +08:00
parent 46105fc315
commit b466b3073b
1 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/integrations/platforms/kubernetes-csi.mdx
+11 -4
View File
@@ -54,12 +54,19 @@ helm repo add secrets-store-csi-driver https://kubernetes-sigs.github.io/secrets
```bash ```bash
helm install csi secrets-store-csi-driver/secrets-store-csi-driver \ helm install csi secrets-store-csi-driver/secrets-store-csi-driver \
--namespace=kube-system \ --namespace=kube-system \
--set "tokenRequests[0].audience=infisical" \ # Configure authentication for the CSI provider --set "tokenRequests[0].audience=infisical" \
--set enableSecretRotation=true \ # Enable automatic secret updates from Infisical --set enableSecretRotation=true \
--set rotationPollInterval=2m \ # Check for secret updates every 2 minutes --set rotationPollInterval=2m \
--set "syncSecret.enabled=true" \ # Enable syncing secrets to Kubernetes secrets (optional) --set "syncSecret.enabled=true" \
``` ```
The flags configure the following:
- `tokenRequests[0].audience=infisical`: Configures authentication for the CSI provider (required)
- `enableSecretRotation=true`: Enables automatic secret updates from Infisical
- `rotationPollInterval=2m`: Checks for secret updates every 2 minutes
- `syncSecret.enabled=true`: Enables syncing secrets to Kubernetes secrets (optional)
If you do not wish to use the secret rotation feature of the secrets store CSI driver, you can omit the `enableSecretRotation` and the `rotationPollInterval` flags. If you do not wish to use the secret rotation feature of the secrets store CSI driver, you can omit the `enableSecretRotation` and the `rotationPollInterval` flags.
Do note that by default, secrets from Infisical are only fetched and mounted during pod creation. If there are any changes made to the secrets in Infisical, Do note that by default, secrets from Infisical are only fetched and mounted during pod creation. If there are any changes made to the secrets in Infisical,
they will not propagate to the pods unless secret rotation is enabled for the CSI driver. they will not propagate to the pods unless secret rotation is enabled for the CSI driver.