Files
homelab/k8s/apps/pasarguard/external-secrets.yaml

44 lines
1.1 KiB
YAML
Raw Normal View History

2025-11-05 12:13:42 +02:00
---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: pasarguard-secrets
spec:
target:
name: pasarguard-secrets
deletionPolicy: Delete
template:
type: Opaque
data:
SUDO_PASSWORD: |-
{{ .admin_password }}
SUDO_USERNAME: |-
{{ .admin_username }}
SQLALCHEMY_DATABASE_URL : |-
"postgresql+asyncpg://pasarguard:{{ .pg_pass }}@psql.psql.svc/pasarguard"
data:
- secretKey: pg_pass
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: 2a9deb39-ef22-433e-a1be-df1555625e22
property: fields[9].value
- secretKey: admin_password
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: 35ec5880-2576-401b-a89a-3c9d56b9c1de
property: login.password
- secretKey: admin_username
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: 35ec5880-2576-401b-a89a-3c9d56b9c1de
property: login.username