From e95f6d35ac8818057cd3a35687d8c8f2e500499c Mon Sep 17 00:00:00 2001
From: Khue Doan <mail@khuedoan.com>
Date: Thu, 1 Jan 2026 20:08:56 +0700
Subject: [PATCH] refactor(vault): initial migration to Flux CD

---
 platform/staging/vault.yaml | 49 +++++++++++++++++++++++++++++++++++++
 1 file changed, 49 insertions(+)
 create mode 100644 platform/staging/vault.yaml

diff --git a/platform/staging/vault.yaml b/platform/staging/vault.yaml
new file mode 100644
index 0000000..518c9b7
--- /dev/null
+++ b/platform/staging/vault.yaml
@@ -0,0 +1,49 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: bank-vaults
+  namespace: flux-system
+spec:
+  type: oci
+  url: oci://ghcr.io/bank-vaults/helm-charts
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: vault-operator
+  namespace: flux-system
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: vault-operator
+      version: 1.23.0
+      sourceRef:
+        kind: HelmRepository
+        name: bank-vaults
+  releaseName: vault-operator
+  targetNamespace: vault
+  install:
+    createNamespace: true
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: vault-secrets-webhook
+  namespace: flux-system
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: vault-secrets-webhook
+      version: 1.23.0
+      sourceRef:
+        kind: HelmRepository
+        name: bank-vaults
+  releaseName: vault-secrets-webhook
+  targetNamespace: vault
+  install:
+    createNamespace: true
+  values:
+    env:
+      VAULT_ADDR: http://vault-cluster.vault.svc.cluster.local:8200
-- 
2.51.2