Files
infrastructure/clusters/cl01tl/helm/komodo/templates/external-secret.yaml
2026-04-23 17:26:26 -05:00

57 lines
1.4 KiB
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: komodo-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: komodo-secret
{{- include "custom.labels" . | nindent 4 }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: passkey
remoteRef:
key: /cl01tl/komodo/config
property: passkey
- secretKey: jwt
remoteRef:
key: /cl01tl/komodo/config
property: jwt
- secretKey: webhook
remoteRef:
key: /cl01tl/komodo/config
property: webhook
- secretKey: oidc-client-id
remoteRef:
key: /authentik/oidc/komodo
property: client
- secretKey: oidc-client-secret
remoteRef:
key: /authentik/oidc/komodo
property: secret
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: komodo-postgresql-17-fdb-cluster-ferret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: komodo-postgresql-17-fdb-cluster-ferret
{{- include "custom.labels" . | nindent 4 }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: uri
remoteRef:
key: /cl01tl/komodo/ferret
property: uri
- secretKey: password
remoteRef:
key: /cl01tl/komodo/ferret
property: password