Bootstrapping vault-secrets-operator

Vault Secrets Operator is the only component of the Science Platform whose secret has to be manually created, so that it can create the secrets for all other applications. This will be done automatically by the install script.

Its secret will look like this:

apiVersion: v1
kind: Secret
metadata:
  name: vault-secrets-operator
  namespace: vault-secrets-operator
type: Opaque
stringData:
  VAULT_TOKEN: <token>
  VAULT_TOKEN_LEASE_DURATION: 86400

Replace <token> with the read Vault token for the path secret/k8s_operator/<cluster-name> in Vault (or whatever Vault enclave you plan to use for this Phalanx environment). The path must match the path configured in values-<environment>.yaml in /science-platform.

See DMTN-112 for more information.