Can Vault operator sync secrets of type TLS

Vault
1

Hello Team,

it is possilbe that the Vault (k8S) Operator synchronize secrets of type kubernetes.io/tls?

3

You can use VSO with the PKI secrets engine to sync to a Kubernetes secret:

A quick scan of the VSO repo - I think so.

Specifically vault-secrets-operator/controllers/vaultpkisecret_controller.go at ade4f948881d5d14822f56b44e2de0d6ea8217a6 · hashicorp/vault-secrets-operator · GitHub

go.mod in the VSO repo uses k8s.io/api v0.37.1, and that shows a secret type of api/core/v1/types.go at v0.37.1 · kubernetes/api · GitHub

I don’t have an environment spun up at the moment, but assuming all the above, it should look something like

---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultPKISecret
metadata:
  name: vault-pki-tls
  namespace: default
spec:
  vaultAuthRef: vault-auth
  mount: pki
  role: examplepki
  commonName: example.com
  format: pem
  destination:
    create: true
    name: pki-tls
    type: kubernetes.io/tls