Files
k8scd/argocd/webhook-es.yaml
T
2026-04-06 18:44:32 +02:00

26 lines
623 B
YAML

apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: webhook-es
namespace: argocd
spec:
refreshInterval: "15s"
secretStoreRef:
name: vault-backend
kind: ClusterSecretStore
target:
template:
data:
webhook.github.secret: "{{ .webhook_secret | toString }}"
oidc.authentik.clientSecret: "{{ .oidc_client_secret | toString }}"
name: argocd-secret
creationPolicy: Merge
data:
- secretKey: webhook_secret
remoteRef:
key: github_secret
- secretKey: oidc_client_secret
remoteRef:
key: kv/argocd-oidc
property: client_secret