A Kubernetes operator that bridges Hardware Security Module (HSM) data storage with Kubernetes Secrets, providing true secret portability th
fix helmchart again
+6
-17
+2
-2
helm/hsm-secrets-operator/Chart.yaml
+2
-2
helm/hsm-secrets-operator/Chart.yaml
···
2
2
name: hsm-secrets-operator
3
3
description: A Kubernetes operator that bridges Pico HSM binary data storage with Kubernetes Secrets
4
4
type: application
5
-
version: 0.2.1
6
-
appVersion: v0.2.1
5
+
version: 0.2.2
6
+
appVersion: v0.2.2
7
7
icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/kubernetes/icon/color/kubernetes-icon-color.svg
8
8
home: https://github.com/evanjarrett/hsm-secrets-operator
9
9
sources:
+4
-15
helm/hsm-secrets-operator/templates/deployment.yaml
+4
-15
helm/hsm-secrets-operator/templates/deployment.yaml
···
55
55
- --health-probe-bind-address=:{{ .Values.health.port }}
56
56
{{- end }}
57
57
env:
58
-
- name: HSM_CLIENT_TYPE
59
-
value: {{ .Values.hsm.clientType | quote }}
60
-
{{- if eq .Values.hsm.clientType "pkcs11" }}
61
-
- name: PKCS11_LIBRARY
62
-
value: {{ .Values.hsm.pkcs11.library | quote }}
63
-
- name: PKCS11_SLOT_ID
64
-
value: {{ .Values.hsm.pkcs11.slotId | quote }}
65
-
{{- if .Values.hsm.pkcs11.pinSecret }}
66
-
- name: PKCS11_PIN
67
-
valueFrom:
68
-
secretKeyRef:
69
-
name: {{ .Values.hsm.pkcs11.pinSecret.name }}
70
-
key: {{ .Values.hsm.pkcs11.pinSecret.key }}
71
-
{{- end }}
72
-
{{- end }}
58
+
- name: HSM_DEFAULT_CLIENT_TYPE
59
+
value: {{ .Values.hsm.defaultClientType | quote }}
60
+
# PKCS#11 configuration is now per-device via HSMDevice CRDs
61
+
# No global HSM configuration environment variables needed
73
62
- name: DEFAULT_SYNC_INTERVAL
74
63
value: {{ .Values.config.defaultSyncInterval | quote }}
75
64
- name: DEFAULT_SECRET_TYPE