alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 12 Actions Activity

chore: Update manifests after change

Browse Source
This commit is contained in:
Gitea
2026-04-24 01:42:14 +00:00
parent c86db41e63
commit bdac1c8632
14 changed files with 53 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
clusters/cl01tl/manifests/openbao/Deployment-openbao-unseal-unseal-1.yaml
View File

@@ -37,6 +37,8 @@ spec:
- envFrom:
- secretRef:
name: openbao-unseal-config-1
- secretRef:
name: openbao-ntfy-unseal-config
image: ghcr.io/lrstanley/vault-unseal:1.0.0@sha256:9b936fadc8dea2a473972806bffc218a4dd2fbc3b373566138a60e058cc544aa
name: main
resources:

2
clusters/cl01tl/manifests/openbao/Deployment-openbao-unseal-unseal-2.yaml
View File

@@ -37,6 +37,8 @@ spec:
- envFrom:
- secretRef:
name: openbao-unseal-config-2
- secretRef:
name: openbao-ntfy-unseal-config
image: ghcr.io/lrstanley/vault-unseal:1.0.0@sha256:9b936fadc8dea2a473972806bffc218a4dd2fbc3b373566138a60e058cc544aa
name: main
resources:

2
clusters/cl01tl/manifests/openbao/Deployment-openbao-unseal-unseal-3.yaml
View File

@@ -37,6 +37,8 @@ spec:
- envFrom:
- secretRef:
name: openbao-unseal-config-3
- secretRef:
name: openbao-ntfy-unseal-config
image: ghcr.io/lrstanley/vault-unseal:1.0.0@sha256:9b936fadc8dea2a473972806bffc218a4dd2fbc3b373566138a60e058cc544aa
name: main
resources:

28
clusters/cl01tl/manifests/openbao/ExternalSecret-openbao-ntfy-unseal-config.yaml Normal file
View File

@@ -0,0 +1,28 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: openbao-ntfy-unseal-config
namespace: openbao
labels:
app.kubernetes.io/name: openbao-ntfy-unseal-config
app.kubernetes.io/instance: openbao
app.kubernetes.io/part-of: openbao
spec:
secretStoreRef:
kind: ClusterSecretStore
name: openbao
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
NOTIFY_QUEUE_URLS: "{{ .endpoint }}/{{ .topic }}/?priority=4&tags=vault,unseal&title=Vault+Unsealed"
data:
- secretKey: endpoint
remoteRef:
key: /cl01tl/ntfy/users/cl01tl
property: internal-endpoint-credential
- secretKey: topic
remoteRef:
key: /cl01tl/ntfy/topics
property: openbao

10
clusters/cl01tl/manifests/openbao/ExternalSecret-openbao-unseal-config-1.yaml
View File

@@ -15,16 +15,12 @@ spec:
- secretKey: ENVIRONMENT
remoteRef:
key: /cl01tl/openbao/unseal
property: ENVIRONMENT
property: environment
- secretKey: NODES
remoteRef:
key: /cl01tl/openbao/unseal
property: NODES
property: nodes
- secretKey: TOKENS
remoteRef:
key: /cl01tl/openbao/unseal
property: TOKENS_1
- secretKey: NOTIFY_QUEUE_URLS
remoteRef:
key: /cl01tl/openbao/unseal
property: NOTIFY_QUEUE_URLS
property: tokens-1

10
clusters/cl01tl/manifests/openbao/ExternalSecret-openbao-unseal-config-2.yaml
View File

@@ -15,16 +15,12 @@ spec:
- secretKey: ENVIRONMENT
remoteRef:
key: /cl01tl/openbao/unseal
property: ENVIRONMENT
property: environment
- secretKey: NODES
remoteRef:
key: /cl01tl/openbao/unseal
property: NODES
property: nodes
- secretKey: TOKENS
remoteRef:
key: /cl01tl/openbao/unseal
property: TOKENS_2
- secretKey: NOTIFY_QUEUE_URLS
remoteRef:
key: /cl01tl/openbao/unseal
property: NOTIFY_QUEUE_URLS
property: tokens-2

10
clusters/cl01tl/manifests/openbao/ExternalSecret-openbao-unseal-config-3.yaml
View File

@@ -15,16 +15,12 @@ spec:
- secretKey: ENVIRONMENT
remoteRef:
key: /cl01tl/openbao/unseal
property: ENVIRONMENT
property: environment
- secretKey: NODES
remoteRef:
key: /cl01tl/openbao/unseal
property: NODES
property: nodes
- secretKey: TOKENS
remoteRef:
key: /cl01tl/openbao/unseal
property: TOKENS_3
- secretKey: NOTIFY_QUEUE_URLS
remoteRef:
key: /cl01tl/openbao/unseal
property: NOTIFY_QUEUE_URLS
property: tokens-3