Merge pull request 'tmp/secrets-7' (#6159) from tmp/secrets-7 into main

Reviewed-on: #6159

clusters/cl01tl/helm/external-dns/templates/external-secret.yaml

@@ -13,5 +13,5 @@ spec:
   data:
     - secretKey: api-key
       remoteRef:
-        key: /unifi/auth/cl01tl
+        key: /unifi/users/cl01tl
         property: api-key

clusters/cl01tl/helm/jellystat/templates/external-secret.yaml

@@ -21,5 +21,5 @@ spec:
         property: user
     - secretKey: password
       remoteRef:
-        key: /cl01tl/jellystat/cconfig
+        key: /cl01tl/jellystat/config
         property: password

clusters/cl01tl/helm/kube-prometheus-stack/templates/external-secret.yaml

@@ -13,7 +13,7 @@ spec:
   data:
     - secretKey: ntfy_password
       remoteRef:
-        key: / cl01tl/ntfy/users/cl01tl
+        key: /cl01tl/ntfy/users/cl01tl
         property: password
 
 ---

clusters/cl01tl/helm/ollama/values.yaml

@@ -127,7 +127,7 @@ ollama:
             - name: WEBUI_SECRET_KEY
               valueFrom:
                 secretKeyRef:
-                  name: ollama-key
+                  name: open-webui-key
                   key: key
             - name: DATABASE_URL
               valueFrom:

clusters/cl01tl/helm/paperless-ngx/templates/external-secret.yaml

@@ -55,5 +55,5 @@ spec:
   data:
     - secretKey: PAPERLESS_SOCIALACCOUNT_PROVIDERS
       remoteRef:
-        key: /authentik/oidc/paperless-ngx
+        key: /cl01tl/authentik/oidc/paperless-ngx
         property: PAPERLESS_SOCIALACCOUNT_PROVIDERS

clusters/cl01tl/helm/vault/templates/external-secret.yaml

@@ -1,5 +1,24 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
+metadata:
+  name: vault-token
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: vault-token
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: openbao
+  data:
+    - secretKey: token
+      remoteRef:
+        key: /cl01tl/vault/role/snapshot
+        property: root
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
 metadata:
   name: vault-snapshot-agent-role
   namespace: {{ .Release.Namespace }}
@@ -174,11 +193,11 @@ spec:
   data:
     - secretKey: NTFY_TOKEN
       remoteRef:
-        key: /ntfy/user/cl01tl
+        key: /cl01tl/ntfy/users/cl01tl
         property: token
     - secretKey: NTFY_ENDPOINT
       remoteRef:
-        key: /ntfy/user/cl01tl
+        key: /cl01tl/ntfy/users/cl01tl
         property: endpoint
     - secretKey: NTFY_TOPIC
       remoteRef:

clusters/cl01tl/helm/yamtrack/templates/external-secret.yaml

@@ -14,7 +14,7 @@ spec:
     - secretKey: SECRET
       remoteRef:
         key: /cl01tl/yamtrack/config
-        property: SECRET
+        property: secret
 
 ---
 apiVersion: external-secrets.io/v1