feat: add more

clusters/cl01tl/helm/searxng/templates/external-secret.yaml

@@ -1,10 +1,10 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: searxng-browser-metrics-auth
+  name: searxng-browser-metrics-credentials
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: searxng-browser-metrics-auth
+    app.kubernetes.io/name: searxng-browser-metrics-credentials
     {{- include "custom.labels" . | nindent 4 }}
 spec:
   secretStoreRef:
@@ -13,32 +13,9 @@ spec:
   data:
     - secretKey: metrics-password
       remoteRef:
-        key: cl01tl/searxng/browser
-        property: metrics-password
+        key: /cl01tl/searxng/metrics
+        property: password
     - secretKey: metrics-username
       remoteRef:
-        key: cl01tl/searxng/browser
-        property: metrics-username
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: searxng-api-config-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: searxng-api-config-secret
-    {{- include "custom.labels" . | nindent 4 }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: settings.yml
-      remoteRef:
-        key: /cl01tl/searxng/api/config
-        property: settings.yml
-    - secretKey: limiter.toml
-      remoteRef:
-        key: /cl01tl/searxng/api/config
-        property: limiter.toml
+        key: /cl01tl/searxng/metrics
+        property: username

clusters/cl01tl/helm/searxng/templates/secret-provider-class.yaml

@@ -0,0 +1,22 @@
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: searxng-api-config
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: searxng-api-config
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  provider: openbao
+  parameters:
+    baoAddress: "http://openbao-internal.openbao:8200"
+    roleName: searxng
+    objects: |
+      - objectName: limiter.toml
+        fileName: limiter.toml
+        secretPath: secret/data/cl01tl/searxng/api
+        secretKey: limiter.toml
+      - objectName: settings.yml
+        fileName: settings.yml
+        secretPath: secret/data/cl01tl/searxng/api
+        secretKey: settings.yml