112 lines
		
	
	
		
			3.0 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
			
		
		
	
	
			112 lines
		
	
	
		
			3.0 KiB
		
	
	
	
		
			YAML
		
	
	
	
	
	
apiVersion: external-secrets.io/v1
 | 
						|
kind: ExternalSecret
 | 
						|
metadata:
 | 
						|
  name: outline-key-secret
 | 
						|
  namespace: {{ .Release.Namespace }}
 | 
						|
  labels:
 | 
						|
    app.kubernetes.io/name: outline-key-secret
 | 
						|
    app.kubernetes.io/instance: {{ .Release.Name }}
 | 
						|
    app.kubernetes.io/part-of: {{ .Release.Name }}
 | 
						|
spec:
 | 
						|
  secretStoreRef:
 | 
						|
    kind: ClusterSecretStore
 | 
						|
    name: vault
 | 
						|
  data:
 | 
						|
    - secretKey: secret-key
 | 
						|
      remoteRef:
 | 
						|
        conversionStrategy: Default
 | 
						|
        decodingStrategy: None
 | 
						|
        key: /cl01tl/outline/key
 | 
						|
        metadataPolicy: None
 | 
						|
        property: secret-key
 | 
						|
    - secretKey: utils-key
 | 
						|
      remoteRef:
 | 
						|
        conversionStrategy: Default
 | 
						|
        decodingStrategy: None
 | 
						|
        key: /cl01tl/outline/key
 | 
						|
        metadataPolicy: None
 | 
						|
        property: utils-key
 | 
						|
 | 
						|
---
 | 
						|
apiVersion: external-secrets.io/v1
 | 
						|
kind: ExternalSecret
 | 
						|
metadata:
 | 
						|
  name: outline-oidc-secret
 | 
						|
  namespace: {{ .Release.Namespace }}
 | 
						|
  labels:
 | 
						|
    app.kubernetes.io/name: outline-oidc-secret
 | 
						|
    app.kubernetes.io/instance: {{ .Release.Name }}
 | 
						|
    app.kubernetes.io/part-of: {{ .Release.Name }}
 | 
						|
spec:
 | 
						|
  secretStoreRef:
 | 
						|
    kind: ClusterSecretStore
 | 
						|
    name: vault
 | 
						|
  data:
 | 
						|
    - secretKey: client
 | 
						|
      remoteRef:
 | 
						|
        conversionStrategy: Default
 | 
						|
        decodingStrategy: None
 | 
						|
        key: /authentik/oidc/outline
 | 
						|
        metadataPolicy: None
 | 
						|
        property: client
 | 
						|
    - secretKey: secret
 | 
						|
      remoteRef:
 | 
						|
        conversionStrategy: Default
 | 
						|
        decodingStrategy: None
 | 
						|
        key: /authentik/oidc/outline
 | 
						|
        metadataPolicy: None
 | 
						|
        property: secret
 | 
						|
 | 
						|
---
 | 
						|
apiVersion: external-secrets.io/v1
 | 
						|
kind: ExternalSecret
 | 
						|
metadata:
 | 
						|
  name: outline-cloudflared-secret
 | 
						|
  namespace: {{ .Release.Namespace }}
 | 
						|
  labels:
 | 
						|
    app.kubernetes.io/name: outline-cloudflared-secret
 | 
						|
    app.kubernetes.io/instance: {{ .Release.Name }}
 | 
						|
    app.kubernetes.io/part-of: {{ .Release.Name }}
 | 
						|
spec:
 | 
						|
  secretStoreRef:
 | 
						|
    kind: ClusterSecretStore
 | 
						|
    name: vault
 | 
						|
  data:
 | 
						|
    - secretKey: cf-tunnel-token
 | 
						|
      remoteRef:
 | 
						|
        conversionStrategy: Default
 | 
						|
        decodingStrategy: None
 | 
						|
        key: /cloudflare/tunnels/outline
 | 
						|
        metadataPolicy: None
 | 
						|
        property: token
 | 
						|
 | 
						|
---
 | 
						|
apiVersion: external-secrets.io/v1
 | 
						|
kind: ExternalSecret
 | 
						|
metadata:
 | 
						|
  name: outline-postgresql-17-cluster-backup-secret
 | 
						|
  namespace: {{ .Release.Namespace }}
 | 
						|
  labels:
 | 
						|
    app.kubernetes.io/name: outline-postgresql-17-cluster-backup-secret
 | 
						|
    app.kubernetes.io/instance: {{ .Release.Name }}
 | 
						|
    app.kubernetes.io/part-of: {{ .Release.Name }}
 | 
						|
spec:
 | 
						|
  secretStoreRef:
 | 
						|
    kind: ClusterSecretStore
 | 
						|
    name: vault
 | 
						|
  data:
 | 
						|
    - secretKey: ACCESS_KEY_ID
 | 
						|
      remoteRef:
 | 
						|
        conversionStrategy: Default
 | 
						|
        decodingStrategy: None
 | 
						|
        key: /digital-ocean/home-infra/postgres-backups
 | 
						|
        metadataPolicy: None
 | 
						|
        property: access
 | 
						|
    - secretKey: ACCESS_SECRET_KEY
 | 
						|
      remoteRef:
 | 
						|
        conversionStrategy: Default
 | 
						|
        decodingStrategy: None
 | 
						|
        key: /digital-ocean/home-infra/postgres-backups
 | 
						|
        metadataPolicy: None
 | 
						|
        property: secret
 |