2026-04-24 17:29:45 +00:00
8 changed files with 16 additions and 7 deletions
--- a/clusters/cl01tl/manifests/talos/CronJob-talos-external.yaml
+++ b/clusters/cl01tl/manifests/talos/CronJob-talos-external.yaml
@@ -29,7 +29,7 @@ spec:
            app.kubernetes.io/name: talos
        spec:
          enableServiceLinks: false
-          serviceAccountName: talos-backup-secrets
+          serviceAccountName: talos-backup
          automountServiceAccountToken: true
          hostIPC: false
          hostNetwork: false
--- a/clusters/cl01tl/manifests/talos/CronJob-talos-local.yaml
+++ b/clusters/cl01tl/manifests/talos/CronJob-talos-local.yaml
@@ -29,7 +29,7 @@ spec:
            app.kubernetes.io/name: talos
        spec:
          enableServiceLinks: false
-          serviceAccountName: talos-backup-secrets
+          serviceAccountName: talos-backup
          automountServiceAccountToken: true
          hostIPC: false
          hostNetwork: false
--- a/clusters/cl01tl/manifests/talos/CronJob-talos-remote.yaml
+++ b/clusters/cl01tl/manifests/talos/CronJob-talos-remote.yaml
@@ -29,7 +29,7 @@ spec:
            app.kubernetes.io/name: talos
        spec:
          enableServiceLinks: false
-          serviceAccountName: talos-backup-secrets
+          serviceAccountName: talos-backup
          automountServiceAccountToken: true
          hostIPC: false
          hostNetwork: false
--- a/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-external-config.yaml
+++ b/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-external-config.yaml
@@ -11,7 +11,7 @@ spec:
  provider: openbao
  parameters:
    baoAddress: "http://openbao-internal.openbao:8200"
-    roleName: talos-backup-secrets
+    roleName: talos-backup
    objects: |
      - objectName: .s3cfg
        fileName: .s3cfg
--- a/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-local-config.yaml
+++ b/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-local-config.yaml
@@ -11,7 +11,7 @@ spec:
  provider: openbao
  parameters:
    baoAddress: "http://openbao-internal.openbao:8200"
-    roleName: talos-backup-secrets
+    roleName: talos-backup
    objects: |
      - objectName: .s3cfg
        fileName: .s3cfg
--- a/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-remote-config.yaml
+++ b/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-remote-config.yaml
@@ -11,7 +11,7 @@ spec:
  provider: openbao
  parameters:
    baoAddress: "http://openbao-internal.openbao:8200"
-    roleName: talos-backup-secrets
+    roleName: talos-backup
    objects: |
      - objectName: .s3cfg
        fileName: .s3cfg
--- a/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-defrag-config.yaml
+++ b/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-defrag-config.yaml
@@ -11,7 +11,7 @@ spec:
  provider: openbao
  parameters:
    baoAddress: "http://openbao-internal.openbao:8200"
-    roleName: talos-backup-secrets
+    roleName: talos-backup
    objects: |
      - objectName: config
        fileName: config
--- a/clusters/cl01tl/manifests/talos/ServiceAccount-talos-backup.yaml
+++ b/clusters/cl01tl/manifests/talos/ServiceAccount-talos-backup.yaml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: talos-backup
+  namespace: talos
+  labels:
+    app.kubernetes.io/name: talos-backup
+    app.kubernetes.io/instance: talos
+    app.kubernetes.io/part-of: talos