feat: add more

clusters/cl01tl/helm/komodo/templates/external-secret.yaml

@@ -9,27 +9,42 @@ metadata:
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   data:
     - secretKey: passkey
       remoteRef:
-        key: /cl01tl/komodo/config
+        key: /cl01tl/komodo/key
         property: passkey
     - secretKey: jwt
       remoteRef:
-        key: /cl01tl/komodo/config
+        key: /cl01tl/komodo/key
         property: jwt
     - secretKey: webhook
       remoteRef:
-        key: /cl01tl/komodo/config
+        key: /cl01tl/komodo/key
         property: webhook
-    - secretKey: oidc-client-id
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: komodo-oidc-authentik
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: komodo-oidc-authentik
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: openbao
+  data:
+    - secretKey: client
       remoteRef:
-        key: /authentik/oidc/komodo
+        key: /cl01tl/authentik/oidc/komodo
         property: client
-    - secretKey: oidc-client-secret
+    - secretKey: secret
       remoteRef:
-        key: /authentik/oidc/komodo
+        key: /cl01tl/authentik/oidc/komodo
         property: secret
 
 ---
@@ -44,7 +59,7 @@ metadata:
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault
+    name: openbao
   data:
     - secretKey: uri
       remoteRef:

clusters/cl01tl/helm/komodo/values.yaml

@@ -68,13 +68,13 @@ komodo:
             - name: KOMODO_OIDC_CLIENT_ID
               valueFrom:
                 secretKeyRef:
-                  name: komodo-secret
-                  key: oidc-client-id
+                  name: komodo-oidc-authentik
+                  key: client
             - name: KOMODO_OIDC_CLIENT_SECRET
               valueFrom:
                 secretKeyRef:
-                  name: komodo-secret
-                  key: oidc-client-secret
+                  name: komodo-oidc-authentik
+                  key: secret
             - name: KOMODO_OIDC_USE_FULL_EMAIL
               value: true
           resources: