Add D601 platform-infra secret plane PoC

config/platform-infra/secret-plane.yaml

@@ -0,0 +1,65 @@
+version: 1
+kind: platform-infra-secret-plane
+metadata:
+  id: hwlab-secret-plane
+  owner: HWLAB
+  spec: pikasTech/HWLAB#2233
+  relatedIssues:
+    - 2233
+defaults:
+  targetId: D601
+targets:
+  - id: D601
+    route: D601:k3s
+    namespace: platform-infra
+    role: active
+    enabled: true
+    createNamespace: true
+eso:
+  enabled: true
+  version: v2.7.0
+  manifestUrl: https://github.com/external-secrets/external-secrets/releases/download/v2.7.0/external-secrets.yaml
+  releaseName: external-secrets
+  controllerDeploymentName: external-secrets
+  webhookDeploymentName: external-secrets-webhook
+  certControllerDeploymentName: external-secrets-cert-controller
+  crds:
+    - secretstores.external-secrets.io
+    - externalsecrets.external-secrets.io
+    - clustersecretstores.external-secrets.io
+vault:
+  mode: dev-kv-v2
+  deploymentName: hwlab-secret-plane-vault
+  serviceName: hwlab-secret-plane-vault
+  tokenSecretName: hwlab-secret-plane-vault-token
+  tokenSecretKey: token
+  image:
+    repository: hashicorp/vault
+    tag: 1.20.3
+    pullPolicy: IfNotPresent
+  port: 8200
+  bootstrap:
+    tokenMode: generated-if-missing
+    tokenLengthBytes: 32
+syncProbe:
+  secretStoreName: hwlab-secret-plane-vault
+  externalSecretName: hwlab-secret-plane-poc
+  targetSecretName: hwlab-secret-plane-poc-sync
+  refreshInterval: 15s
+  vaultMountPath: secret
+  remotePath: hwlab-secret-plane/poc
+  remoteProperty: password
+  expectedFingerprint: sha256:7b47b343642e442d94ae889778113b0137eb8db255d9c03cb42f2582adfa2f2f
+  testValueSource:
+    mode: repo-poc-static
+    value: hwlab-secret-plane-poc-d601
+  consumer:
+    deploymentName: hwlab-secret-plane-consumer
+    envName: POC_PASSWORD
+    image:
+      repository: busybox
+      tag: 1.36.1
+      pullPolicy: IfNotPresent
+validation:
+  timeoutSeconds: 45
+  pollSeconds: 3