# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0

# Local Vault credential-driver validation overlay.
#
# Use with:
#   skaffold run -p credential-driver-vault
#
# The profile assumes another process has already deployed a Vault-compatible
# backend. Local e2e validation deploys OpenBao in the `openbao` namespace with
# a Kubernetes auth role named `openshell-gateway` bound to the OpenShell
# gateway ServiceAccount in the `openshell` namespace.

gatewayConfig:
  openshell.gateway:
    credential_drivers:
      - vault
  openshell.credential_drivers.vault:
    # The local E2E fixture exposes this alias in the gateway namespace. It
    # also matches the DNS SAN in OpenBao's development TLS certificate.
    address: https://openbao-0:8200
    role: openshell-gateway

credentialDrivers:
  vault:
    caConfigMapName: openbao-ca