mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 14:29:09 +01:00
31 lines
818 B
YAML
31 lines
818 B
YAML
# Velero's key for its bucket in Garage on the NAS (nas/garage), in the
|
|
# AWS credentials file format the aws plugin and kopia read.
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: velero-s3-credentials
|
|
spec:
|
|
secretStoreRef:
|
|
name: vault-backend
|
|
kind: ClusterSecretStore
|
|
refreshInterval: 15m
|
|
target:
|
|
name: velero-s3-credentials
|
|
creationPolicy: Owner
|
|
template:
|
|
engineVersion: v2
|
|
data:
|
|
cloud: |
|
|
[default]
|
|
aws_access_key_id={{ .access_key_id }}
|
|
aws_secret_access_key={{ .secret_access_key }}
|
|
data:
|
|
- secretKey: access_key_id
|
|
remoteRef:
|
|
key: kv/velero-s3
|
|
property: access_key_id
|
|
- secretKey: secret_access_key
|
|
remoteRef:
|
|
key: kv/velero-s3
|
|
property: secret_access_key
|