Files
infrastructure/clusters/cl01tl/manifests/openbao/ExternalSecret-openbao-ntfy-unseal-config.yaml

29 lines
767 B
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: openbao-ntfy-unseal-config
namespace: openbao
labels:
app.kubernetes.io/name: openbao-ntfy-unseal-config
app.kubernetes.io/instance: openbao
app.kubernetes.io/part-of: openbao
spec:
secretStoreRef:
kind: ClusterSecretStore
name: openbao
target:
template:
mergePolicy: Merge
engineVersion: v2
data:
NOTIFY_QUEUE_URLS: "{{ .endpoint }}/{{ .topic }}/?priority=4&tags=vault,unseal&title=Vault+Unsealed"
data:
- secretKey: endpoint
remoteRef:
key: /cl01tl/ntfy/users/cl01tl
property: internal-endpoint-credential
- secretKey: topic
remoteRef:
key: /cl01tl/ntfy/topics
property: openbao