enable secret

This commit is contained in:
2025-03-06 23:12:02 -06:00
parent 1ba0b9714b
commit 78564114d9

View File

@@ -264,64 +264,64 @@ spec:
metadataPolicy: None metadataPolicy: None
property: token property: token
# --- ---
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: matrix-synapse-backup-secret name: matrix-synapse-backup-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: matrix-synapse-backup-secret app.kubernetes.io/name: matrix-synapse-backup-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: backup app.kubernetes.io/component: backup
# app.kubernetes.io/part-of: {{ .Release.Name }} app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# target: target:
# template: template:
# mergePolicy: Merge mergePolicy: Merge
# engineVersion: v2 engineVersion: v2
# data: data:
# RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/matrix-synapse/matrix-synapse" RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/matrix-synapse/matrix-synapse"
# data: data:
# - secretKey: BUCKET_ENDPOINT - secretKey: BUCKET_ENDPOINT
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: S3_BUCKET_ENDPOINT property: S3_BUCKET_ENDPOINT
# - secretKey: RESTIC_PASSWORD - secretKey: RESTIC_PASSWORD
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: RESTIC_PASSWORD property: RESTIC_PASSWORD
# - secretKey: AWS_DEFAULT_REGION - secretKey: AWS_DEFAULT_REGION
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/volsync/restic/config key: /cl01tl/volsync/restic/config
# metadataPolicy: None metadataPolicy: None
# property: AWS_DEFAULT_REGION property: AWS_DEFAULT_REGION
# - secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: access_key property: access_key
# - secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /digital-ocean/home-infra/volsync-backups key: /digital-ocean/home-infra/volsync-backups
# metadataPolicy: None metadataPolicy: None
# property: secret_key property: secret_key
# --- # ---
# apiVersion: external-secrets.io/v1beta1 # apiVersion: external-secrets.io/v1beta1