cnpg with authentik

2026-09-17 02:12:55 +02:00 · 2026-03-15 00:27:17 +01:00
parent 09f019264f
commit 4d551d43b0
3 changed files with 46 additions and 11 deletions
@@ -23,7 +23,25 @@ spec:
      remoteRef:
        key: kv/authentik
        property: bootstrap_token
-    - secretKey: postgres_password
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: authentik-postgres-credentials
+spec:
+  secretStoreRef:
+    name: vault-backend
+    kind: ClusterSecretStore
+  refreshInterval: 15m
+  target:
+    name: authentik-postgres-credentials
+    creationPolicy: Owner
+  data:
+    - secretKey: username
+      remoteRef:
+        key: kv/authentik
+        property: postgres_user
+    - secretKey: password
      remoteRef:
        key: kv/authentik
        property: postgres_password