Newer
Older
# =====================================================================================================================
# === Vault template variant
# =====================================================================================================================
# variabilized vault-secrets-provider image
TBC_VAULT_IMAGE: "$CI_REGISTRY/to-be-continuous/tools/vault-secrets-provider:master"
# variables have to be explicitly declared in the YAML to be exported to the service
VAULT_ROLE_ID: "$VAULT_ROLE_ID"
VAULT_SECRET_ID: "$VAULT_SECRET_ID"
Pierre Smeyers
committed
VAULT_OIDC_AUD: "$CI_SERVER_URL"
command: ["--service", "openshift", "4.0.0" ]
- name: "$TBC_VAULT_IMAGE"
Pierre Smeyers
committed
variables:
VAULT_JWT_TOKEN: "$VAULT_JWT_TOKEN"
id_tokens:
VAULT_JWT_TOKEN:
aud: "$VAULT_OIDC_AUD"