Added pasarguard

2025-11-05 12:13:42 +02:00
parent ca19a1f46a
commit 79d106468a
6 changed files with 133 additions and 0 deletions
--- a/k8s/apps/pasarguard/external-secrets.yaml
+++ b/k8s/apps/pasarguard/external-secrets.yaml
@@ -0,0 +1,44 @@
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: pasarguard-secrets
+spec:
+  target:
+    name: pasarguard-secrets
+    deletionPolicy: Delete
+    template:
+      type: Opaque
+      data:
+        SUDO_PASSWORD: |-
+          {{ .admin_password }}
+        SUDO_USERNAME: |-
+          {{ .admin_username }}
+        SQLALCHEMY_DATABASE_URL : |-
+          "postgresql+asyncpg://pasarguard:{{ .pg_pass }}@psql.psql.svc/pasarguard"
+
+  data:
+    - secretKey: pg_pass
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: 2a9deb39-ef22-433e-a1be-df1555625e22
+        property: fields[9].value
+    - secretKey: admin_password
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: 35ec5880-2576-401b-a89a-3c9d56b9c1de
+        property: login.password
+    - secretKey: admin_username
+      sourceRef:
+        storeRef:
+          name: vaultwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: 35ec5880-2576-401b-a89a-3c9d56b9c1de
+        property: login.username