Files
infrastructure/clusters/cl01tl/helm/sparkyfitness/templates/external-secret.yaml
2026-04-23 17:26:26 -05:00

45 lines
1.1 KiB
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: sparkyfitness-key-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: sparkyfitness-key-secret
{{- include "custom.labels" . | nindent 4 }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: openbao
data:
- secretKey: api_encryption_key
remoteRef:
key: /cl01tl/sparkyfitness/key
property: api-encryption-key
- secretKey: better_auth_secret
remoteRef:
key: /cl01tl/sparkyfitness/key
property: better-auth-secret
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: sparkyfitness-oidc-authentik
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: sparkyfitness-oidc-authentik
{{- include "custom.labels" . | nindent 4 }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: openbao
data:
- secretKey: client_id
remoteRef:
key: /cl01tl/authentik/oidc/sparkyfitness
property: client
- secretKey: client_secret
remoteRef:
key: /cl01tl/authentik/oidc/sparkyfitness
property: secret