apiVersion: v1
kind: ServiceAccount
metadata:
  name: vso-reactbin
  namespace: reactbin
---
apiVersion: secrets.hashicorp.com/v1beta1
kind: VaultAuth
metadata:
  name: reactbin-vault-auth
  namespace: reactbin
spec:
  method: kubernetes
  mount: kubernetes
  kubernetes:
    # The operator must create this role in Vault and bind it to the
    # default service account in the reactbin namespace with read access
    # to both reactbin/api/config and reactbin/minio/credentials.
    role: vso-reactbin
    serviceAccount: vso-reactbin
    audiences:
      - vault