++ uralkal vault block

infrastructure-secrets.yaml

@@ -4991,6 +4991,25 @@ environments:
                     token_ttl: 24h
                     read_paths:
                         - minio/apps/measurements
+    uralkal:
+        vault:
+            enabled: true
+            kv_mount: secrets
+            path_prefix: vault
+            kubernetes_auth_backend: kubernetes
+            default_rsa_bits: 4096
+            features:
+                create_regcred: false
+                create_smtp_auth: false
+                create_django_auth: false
+                create_rsa_keys: false
+                create_infra_secrets: false
+                create_infra_policies: true
+                create_infra_roles: true
+                create_app_policies: false
+                create_app_roles: false
+            applications: {}
+        secrets: []
 sops:
     kms: []
     gcp_kms: []
@@ -5015,8 +5034,8 @@ sops:
             dXRWUzlUOWVYMVdUR2tlREJveWF6SVEK/99wDif8yD2VGEqnCeTT6sunURWU+IEu
             xwlt+WPoox0GUNw4efVFL4E7gd7FDJGtur+8si6i26XufQf2Tsk3xQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-09-23T09:45:55Z"
-    mac: ENC[AES256_GCM,data:/M/Ff9ipfnlRd4i3bU2lxFEsOEI/D2O4C18DitPZycFGHzkHikcJ92UGj9ewVzzNUs0p60nRBMYlcUCe8R5tEqa81LRNKDcdDKcqRUDWB+sk8K4jzsT3eFDqk3lcD4/GaSduon/NMRjBd0AIdv97UGNQsKtYPg3klmjiL2YZcg4=,iv:axCmhSsRjAKROtgPw/AUzh6j45Bk089VXGRLo9hWCkw=,tag:rD9/15XZOgBgH2tdUSxW3w==,type:str]
+    lastmodified: "2026-09-25T11:26:26Z"
+    mac: ENC[AES256_GCM,data:xgLxaxtHHsBXs5CilRhTo/h8FlahLOjox42EZ0J8mQXPetW75vr3CVg9uAvftshSqrYKaezualq9eJdr/bMLA65/+V3mzVSJwbFToBtT5jIULJa3EtQcEw/OgDsVBIg326M/qwxtmX2pZu2LL1Ieyz8nZTgUZZqHRrtigwIyyRA=,iv:Rt72ULr3r03g05wweXDzaEUSGVmjbVWrdmDePE+RENU=,tag:TAArdk+qB0nuTzmp/s6c+w==,type:str]
     pgp: []
     encrypted_regex: ^(data)$
     version: 3.12.2