mirror of
https://github.com/fluxcd/flux2.git
synced 2026-02-22 15:41:47 +00:00
update guide for mozilla sops
Signed-off-by: Somtochi Onyekwere <somtochionyekwere@gmail.com>
This commit is contained in:
parent
81f68157fa
commit
5f759200c6
1 changed files with 2 additions and 1 deletions
|
|
@ -106,7 +106,8 @@ secrets by iterating over all the private keys until it finds one that works.
|
||||||
|
|
||||||
### Using various cloud providers
|
### Using various cloud providers
|
||||||
|
|
||||||
When using AWS/GCP KMS, you'll have to bind an IAM Role with access to the KMS
|
When using AWS/GCP KMS, you don't have to include the gpg `secretRef` under
|
||||||
|
`spec.provider` (you can skip the `--decryption-secret` flag when running `flux create kustomization`), instead you'll have to bind an IAM Role with access to the KMS
|
||||||
keys to the `default` service account of the `flux-system` namespace for
|
keys to the `default` service account of the `flux-system` namespace for
|
||||||
kustomize-controller to be able to fetch keys from KMS.
|
kustomize-controller to be able to fetch keys from KMS.
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue