Files
infrastructure/clusters/cl01tl/helm/dawarich/templates/external-secret.yaml
Alex Lebens 7dcd37bb20
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 19s
lint-test-helm / validate-kubeconform (pull_request) Successful in 30s
render-manifests / render-manifests (pull_request) Successful in 44s
feat: add metric auth
2026-05-10 14:42:51 -05:00

76 lines
1.8 KiB
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: dawarich-key
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: dawarich-key
{{- include "custom.labels" . | nindent 4 }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: openbao
data:
- secretKey: key
remoteRef:
key: /cl01tl/dawarich/key
property: key
- secretKey: otp-primary-key
remoteRef:
key: /cl01tl/dawarich/key
property: otp-primary-key
- secretKey: otp-deterministic-key
remoteRef:
key: /cl01tl/dawarich/key
property: otp-deterministic-key
- secretKey: otp-derivation-salt
remoteRef:
key: /cl01tl/dawarich/key
property: otp-derivation-salt
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: dawarich-oidc-authentik
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: dawarich-oidc-authentik
{{- include "custom.labels" . | nindent 4 }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: openbao
data:
- secretKey: client
remoteRef:
key: /cl01tl/authentik/oidc/dawarich
property: client
- secretKey: secret
remoteRef:
key: /cl01tl/authentik/oidc/dawarich
property: secret
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: dawarich-metrics-credentials
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: dawarich-metrics-credentials
{{- include "custom.labels" . | nindent 4 }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: openbao
data:
- secretKey: user
remoteRef:
key: /cl01tl/dawarich/metrics
property: user
- secretKey: password
remoteRef:
key: /cl01tl/dawarich/metrics
property: password