From 79360ef998f912d2d3dbd4b0948f9ed73bd70c57 Mon Sep 17 00:00:00 2001 From: alexlebens Date: Wed, 3 Jul 2024 19:23:51 -0500 Subject: [PATCH] merge external secret files --- .../cops/templates/external-secret copy.yaml | 57 ------------------ .../cops/templates/external-secret.yaml | 59 +++++++++++++++++++ 2 files changed, 59 insertions(+), 57 deletions(-) delete mode 100644 clusters/cl01tl/applications/cops/templates/external-secret copy.yaml diff --git a/clusters/cl01tl/applications/cops/templates/external-secret copy.yaml b/clusters/cl01tl/applications/cops/templates/external-secret copy.yaml deleted file mode 100644 index 61128b0d5..000000000 --- a/clusters/cl01tl/applications/cops/templates/external-secret copy.yaml +++ /dev/null @@ -1,57 +0,0 @@ -apiVersion: external-secrets.io/v1beta1 -kind: ExternalSecret -metadata: - name: cops-config-backup-secret - namespace: {{ .Release.Namespace }} - labels: - app.kubernetes.io/name: cops-config-backup-secret - app.kubernetes.io/instance: {{ .Release.Name }} - app.kubernetes.io/version: {{ .Chart.AppVersion }} - app.kubernetes.io/component: backup - app.kubernetes.io/part-of: {{ .Release.Name }} -spec: - secretStoreRef: - kind: ClusterSecretStore - name: vault - target: - template: - mergePolicy: Merge - engineVersion: v2 - data: - RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/cops/cops-config" - data: - - secretKey: BUCKET_ENDPOINT - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: /cl01tl/volsync/restic/config - metadataPolicy: None - property: S3_BUCKET_ENDPOINT - - secretKey: RESTIC_PASSWORD - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: /cl01tl/volsync/restic/config - metadataPolicy: None - property: RESTIC_PASSWORD - - secretKey: AWS_DEFAULT_REGION - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: /cl01tl/volsync/restic/config - metadataPolicy: None - property: AWS_DEFAULT_REGION - - secretKey: AWS_ACCESS_KEY_ID - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: /aws/keys/cl01tl-volsync-backups - metadataPolicy: None - property: access_key - - secretKey: AWS_SECRET_ACCESS_KEY - remoteRef: - conversionStrategy: Default - decodingStrategy: None - key: /aws/keys/cl01tl-volsync-backups - metadataPolicy: None - property: secret_key diff --git a/clusters/cl01tl/applications/cops/templates/external-secret.yaml b/clusters/cl01tl/applications/cops/templates/external-secret.yaml index 2eaffeb30..15e22399a 100644 --- a/clusters/cl01tl/applications/cops/templates/external-secret.yaml +++ b/clusters/cl01tl/applications/cops/templates/external-secret.yaml @@ -21,3 +21,62 @@ spec: key: /cloudflare/tunnels/cops metadataPolicy: None property: token + +--- +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: cops-config-backup-secret + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: cops-config-backup-secret + app.kubernetes.io/instance: {{ .Release.Name }} + app.kubernetes.io/version: {{ .Chart.AppVersion }} + app.kubernetes.io/component: backup + app.kubernetes.io/part-of: {{ .Release.Name }} +spec: + secretStoreRef: + kind: ClusterSecretStore + name: vault + target: + template: + mergePolicy: Merge + engineVersion: v2 + data: + RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/cops/cops-config" + data: + - secretKey: BUCKET_ENDPOINT + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/volsync/restic/config + metadataPolicy: None + property: S3_BUCKET_ENDPOINT + - secretKey: RESTIC_PASSWORD + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/volsync/restic/config + metadataPolicy: None + property: RESTIC_PASSWORD + - secretKey: AWS_DEFAULT_REGION + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /cl01tl/volsync/restic/config + metadataPolicy: None + property: AWS_DEFAULT_REGION + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /aws/keys/cl01tl-volsync-backups + metadataPolicy: None + property: access_key + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + conversionStrategy: Default + decodingStrategy: None + key: /aws/keys/cl01tl-volsync-backups + metadataPolicy: None + property: secret_key