mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 22:29:09 +01:00
Ruben Hensen
7acb7eaa8c
ESO 0.16.2 is the one release that serves both v1beta1 and v1. 0.17 stops serving v1beta1, so manifests still on v1beta1 would fail to sync from the next hop on. For these resources the schemas are name-identical (conversion strategy None); only the apiVersion changes.
138 lines
3.0 KiB
YAML
138 lines
3.0 KiB
YAML
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: authentik-secrets
|
|
spec:
|
|
secretStoreRef:
|
|
name: vault-backend
|
|
kind: ClusterSecretStore
|
|
refreshInterval: 15m
|
|
target:
|
|
name: authentik-secrets
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: secret_key
|
|
remoteRef:
|
|
key: kv/authentik
|
|
property: secret_key
|
|
- secretKey: bootstrap_password
|
|
remoteRef:
|
|
key: kv/authentik
|
|
property: bootstrap_password
|
|
- secretKey: bootstrap_token
|
|
remoteRef:
|
|
key: kv/authentik
|
|
property: bootstrap_token
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: authentik-postgres-credentials
|
|
spec:
|
|
secretStoreRef:
|
|
name: vault-backend
|
|
kind: ClusterSecretStore
|
|
refreshInterval: 15m
|
|
target:
|
|
name: authentik-postgres-credentials
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: username
|
|
remoteRef:
|
|
key: kv/authentik
|
|
property: postgres_user
|
|
- secretKey: password
|
|
remoteRef:
|
|
key: kv/authentik
|
|
property: postgres_password
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: vault-oidc-client-secret
|
|
spec:
|
|
secretStoreRef:
|
|
name: vault-backend
|
|
kind: ClusterSecretStore
|
|
refreshInterval: 15m
|
|
target:
|
|
name: vault-oidc-client-secret
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: client_secret
|
|
remoteRef:
|
|
key: kv/vault-oidc
|
|
property: client_secret
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: stalwart-oidc-client-secret
|
|
spec:
|
|
secretStoreRef:
|
|
name: vault-backend
|
|
kind: ClusterSecretStore
|
|
refreshInterval: 15m
|
|
target:
|
|
name: stalwart-oidc-client-secret
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: client_secret
|
|
remoteRef:
|
|
key: kv/stalwart-oidc
|
|
property: client_secret
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: argocd-oidc-client-secret
|
|
spec:
|
|
secretStoreRef:
|
|
name: vault-backend
|
|
kind: ClusterSecretStore
|
|
refreshInterval: 15m
|
|
target:
|
|
name: argocd-oidc-client-secret
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: client_secret
|
|
remoteRef:
|
|
key: kv/argocd-oidc
|
|
property: client_secret
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: freshrss-oidc-client-secret
|
|
spec:
|
|
secretStoreRef:
|
|
name: vault-backend
|
|
kind: ClusterSecretStore
|
|
refreshInterval: 15m
|
|
target:
|
|
name: freshrss-oidc-client-secret
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: client_secret
|
|
remoteRef:
|
|
key: kv/freshrss-oidc
|
|
property: client_secret
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: actualbudget-oidc-client-secret
|
|
spec:
|
|
secretStoreRef:
|
|
name: vault-backend
|
|
kind: ClusterSecretStore
|
|
refreshInterval: 15m
|
|
target:
|
|
name: actualbudget-oidc-client-secret
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: client_secret
|
|
remoteRef:
|
|
key: kv/actualbudget-oidc
|
|
property: client_secret
|