70 lines
3.0 KiB
YAML
70 lines
3.0 KiB
YAML
{{- if .Values.secret.externalSecret.enabled }}
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: {{ include "rclone.sourceSecretName" . }}
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
{{- include "rclone.labels" . | nindent 4 }}
|
|
app.kubernetes.io/name: {{ include "rclone.sourceSecretName" . }}
|
|
{{- with .Values.additionalLabels }}
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
spec:
|
|
secretStoreRef:
|
|
kind: ClusterSecretStore
|
|
name: {{ .Values.secret.externalSecret.storeName | required "External Secret store name is required" }}
|
|
data:
|
|
- secretKey: {{ include "secretRclone.envAccessKey" . }}
|
|
remoteRef:
|
|
key: {{ .Values.secret.externalSecret.source.credentials.path }}
|
|
property: {{ .Values.secret.externalSecret.source.credentials.keyIdProperty }}
|
|
- secretKey: {{ include "secretRclone.envSecretKey" . }}
|
|
remoteRef:
|
|
key: {{ .Values.secret.externalSecret.source.credentials.path }}
|
|
property: {{ .Values.secret.externalSecret.source.credentials.secretKeyProperty }}
|
|
- secretKey: {{ include "secretRclone.envRegion" . }}
|
|
remoteRef:
|
|
key: {{ .Values.secret.externalSecret.source.credentials.path }}
|
|
property: {{ .Values.secret.externalSecret.source.credentials.regionProperty }}
|
|
- secretKey: {{ include "secretRclone.envSrcEndpoint" . }}
|
|
remoteRef:
|
|
key: {{ .Values.secret.externalSecret.source.config.path }}
|
|
property: {{ .Values.secret.externalSecret.source.config.endpointProperty }}
|
|
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: {{ include "rclone.destinationSecretName" . }}
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
{{- include "rclone.labels" . | nindent 4 }}
|
|
app.kubernetes.io/name: {{ include "rclone.destinationSecretName" . }}
|
|
{{- with .Values.additionalLabels }}
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
spec:
|
|
secretStoreRef:
|
|
kind: ClusterSecretStore
|
|
name: {{ .Values.secret.externalSecret.storeName | required "External Secret store name is required" }}
|
|
data:
|
|
- secretKey: {{ include "secretRclone.envAccessKey" . }}
|
|
remoteRef:
|
|
key: {{ .Values.secret.externalSecret.destination.credentials.path }}
|
|
property: {{ .Values.secret.externalSecret.destination.credentials.keyIdProperty }}
|
|
- secretKey: {{ include "secretRclone.envSecretKey" . }}
|
|
remoteRef:
|
|
key: {{ .Values.secret.externalSecret.destination.credentials.path }}
|
|
property: {{ .Values.secret.externalSecret.destination.credentials.secretKeyProperty }}
|
|
- secretKey: {{ include "secretRclone.envRegion" . }}
|
|
remoteRef:
|
|
key: {{ .Values.secret.externalSecret.destination.credentials.path }}
|
|
property: {{ .Values.secret.externalSecret.destination.credentials.regionProperty }}
|
|
- secretKey: {{ include "secretRclone.envDestEndpoint" . }}
|
|
remoteRef:
|
|
key: {{ .Values.secret.externalSecret.destination.config.path }}
|
|
property: {{ .Values.secret.externalSecret.destination.config.endpointProperty }}
|
|
{{- end }}
|