migrate

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: external-secrets
+  repository: https://charts.external-secrets.io
+  version: 1.1.0
+digest: sha256:543c98c4f4014f91b05c823444d87990dcdcd9710a0e5ccd953c5dc4e70006ee
+generated: "2025-12-01T20:25:40.642486-06:00"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -0,0 +1,18 @@
+apiVersion: v2
+name: external-secrets
+version: 1.0.0
+description: External Secrets
+keywords:
+  - external-secrets
+  - secrets
+  - vault
+home: https://wiki.alexlebens.dev/s/d29044fb-0d63-4500-8853-2971964f356a
+sources:
+  - https://github.com/external-secrets/external-secrets
+  - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
+dependencies:
+  - name: external-secrets
+    version: 1.1.0
+    repository: https://charts.external-secrets.io
+icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
+appVersion: 0.17.0

clusters/cl01tl/helm/external-secrets/templates/cluster-secret-store.yaml

@@ -0,0 +1,19 @@
+apiVersion: external-secrets.io/v1
+kind: ClusterSecretStore
+metadata:
+  name: vault
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: vault
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  provider:
+    vault:
+      server: http://vault-internal.vault:8200
+      path: secret
+      auth:
+        tokenSecretRef:
+          namespace: vault
+          name: vault-token
+          key: token