apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: taiga-key-secret namespace: {{ .Release.Namespace }} labels: app.kubernetes.io/name: taiga-key-secret app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/component: web app.kubernetes.io/part-of: {{ .Release.Name }} spec: secretStoreRef: kind: ClusterSecretStore name: vault data: - secretKey: key remoteRef: conversionStrategy: Default decodingStrategy: None key: /taiga/key metadataPolicy: None property: key --- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: taiga-oidc-secret namespace: {{ .Release.Namespace }} labels: app.kubernetes.io/name: taiga-oidc-secret app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/component: web app.kubernetes.io/part-of: {{ .Release.Name }} spec: secretStoreRef: kind: ClusterSecretStore name: vault data: - secretKey: client remoteRef: conversionStrategy: Default decodingStrategy: None key: /authentik/oidc/taiga metadataPolicy: None property: client - secretKey: secret remoteRef: conversionStrategy: Default decodingStrategy: None key: /authentik/oidc/taiga metadataPolicy: None property: secret - secretKey: scopes remoteRef: conversionStrategy: Default decodingStrategy: None key: /authentik/oidc/taiga metadataPolicy: None property: scopes - secretKey: signatureAlgorithm remoteRef: conversionStrategy: Default decodingStrategy: None key: /authentik/oidc/taiga metadataPolicy: None property: signatureAlgorithm - secretKey: baseUrl remoteRef: conversionStrategy: Default decodingStrategy: None key: /authentik/oidc/taiga metadataPolicy: None property: baseUrl - secretKey: jwksEndpoint remoteRef: conversionStrategy: Default decodingStrategy: None key: /authentik/oidc/taiga metadataPolicy: None property: jwksEndpoint - secretKey: authorizationEndpoint remoteRef: conversionStrategy: Default decodingStrategy: None key: /authentik/oidc/taiga metadataPolicy: None property: authorizationEndpoint - secretKey: tokenEndpoint remoteRef: conversionStrategy: Default decodingStrategy: None key: /authentik/oidc/taiga metadataPolicy: None property: tokenEndpoint - secretKey: userEndpoint remoteRef: conversionStrategy: Default decodingStrategy: None key: /authentik/oidc/taiga metadataPolicy: None property: userEndpoint --- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: taiga-async-rabbitmq-secret namespace: {{ .Release.Namespace }} labels: app.kubernetes.io/name: taiga-async-rabbitmq-secret app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/component: web app.kubernetes.io/part-of: {{ .Release.Name }} spec: secretStoreRef: kind: ClusterSecretStore name: vault data: - secretKey: password remoteRef: conversionStrategy: Default decodingStrategy: None key: /taiga/rabbitmq/async metadataPolicy: None property: password - secretKey: erlang remoteRef: conversionStrategy: Default decodingStrategy: None key: /taiga/rabbitmq/async metadataPolicy: None property: erlang --- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: taiga-events-rabbitmq-secret namespace: {{ .Release.Namespace }} labels: app.kubernetes.io/name: taiga-events-rabbitmq-secret app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/component: web app.kubernetes.io/part-of: {{ .Release.Name }} spec: secretStoreRef: kind: ClusterSecretStore name: vault data: - secretKey: password remoteRef: conversionStrategy: Default decodingStrategy: None key: /taiga/rabbitmq/events metadataPolicy: None property: password - secretKey: erlang remoteRef: conversionStrategy: Default decodingStrategy: None key: /taiga/rabbitmq/events metadataPolicy: None property: erlang --- apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: name: taiga-postgresql-16-cluster-backup-secret namespace: {{ .Release.Namespace }} labels: app.kubernetes.io/name: taiga-postgresql-16-cluster-backup-secret app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/component: database app.kubernetes.io/part-of: {{ .Release.Name }} spec: secretStoreRef: kind: ClusterSecretStore name: vault data: - secretKey: ACCESS_KEY_ID remoteRef: conversionStrategy: Default decodingStrategy: None key: /aws/keys/cl01tl-taiga-postgresql metadataPolicy: None property: access_key - secretKey: ACCESS_SECRET_KEY remoteRef: conversionStrategy: Default decodingStrategy: None key: /aws/keys/cl01tl-taiga-postgresql metadataPolicy: None property: secret_key