---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: vault-auth-argocd-mcp
  namespace: argocd-mcp
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultAuth
metadata:
  name: vault-auth
  namespace: argocd-mcp
spec:
  method: kubernetes
  mount: kubernetes
  kubernetes:
    role: ns-argocd-mcp
    serviceAccount: vault-auth-argocd-mcp
    audiences:
    - vault