--- apiVersion: v1 kind: ServiceAccount metadata: name: vault-auth-gitea namespace: gitea --- apiVersion: secrets.hashicorp.com/v1beta1 kind: VaultAuth metadata: name: vault-auth namespace: gitea spec: method: kubernetes mount: kubernetes kubernetes: role: ns-gitea serviceAccount: vault-auth-gitea audiences: - vault