Files
infrastructure/clusters/cl01tl/helm/postiz/templates/external-secret.yaml
Alex Lebens 66d6bf07fb
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 1m35s
lint-test-helm / validate-kubeconform (pull_request) Successful in 40s
render-manifests / render-manifests (pull_request) Successful in 2m6s
feat: refactor apps
2026-04-05 19:46:50 -05:00

75 lines
1.8 KiB
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: postiz-config-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: postiz-config-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: JWT_SECRET
remoteRef:
key: /cl01tl/postiz/config
property: JWT_SECRET
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: postiz-valkey-config
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: postiz-valkey-config
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: REDIS_URL
remoteRef:
key: /cl01tl/postiz/valkey
property: url
- secretKey: user
remoteRef:
key: /cl01tl/postiz/valkey
property: user
- secretKey: password
remoteRef:
key: /cl01tl/postiz/valkey
property: password
- secretKey: default
remoteRef:
key: /cl01tl/postiz/valkey
property: password
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: postiz-oidc-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: postiz-oidc-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: client
remoteRef:
key: /authentik/oidc/postiz
property: client
- secretKey: secret
remoteRef:
key: /authentik/oidc/postiz
property: secret