# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0

# Local Vault credential-driver validation overlay.
#
# Use with:
#   skaffold run -p credential-driver-vault
#
# The profile assumes another process has already deployed a Vault-compatible
# backend. Local e2e validation deploys OpenBao in the `openbao` namespace with
# TLS enabled, publishes its private CA in the `openbao-ca` ConfigMap, and
# creates an `openbao-0` DNS alias matching the OpenBao dev certificate. It also
# configures a Kubernetes auth role named `openshell-gateway` bound to the
# OpenShell gateway ServiceAccount in the `openshell` namespace.

server:
  credentialDrivers:
    vault:
      enabled: true
      address: https://openbao-0:8200
      caConfigMapName: openbao-ca
      role: openshell-gateway