Files
homelab/k8s/apps/firefly-iii/external-secrets.yaml
T
Aleksandr Bogomiakov 2583236f6d
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 15s
Check with kubeconform / lint (push) Successful in 10s
Auto-update README / Generate README and Create MR (push) Successful in 8s
Enabled auto sync openbanking
2026-08-01 13:24:23 +01:00

106 lines
2.9 KiB
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: firefly-secrets
spec:
refreshInterval: 1h
target:
name: firefly-secrets
creationPolicy: Owner
deletionPolicy: Delete
template:
type: Opaque
data:
# Firefly and CloudNativePG deliberately share this generated Secret.
username: firefly
password: |-
{{ .db_password }}
DB_PASSWORD: |-
{{ .db_password }}
APP_KEY: |-
{{ .app_key }}
STATIC_CRON_TOKEN: |-
{{ .cron_token }}
data:
- secretKey: db_password
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: a1867c81-715c-47cd-978d-14ea5bcedea9
property: fields[0].value
- secretKey: app_key
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: a1867c81-715c-47cd-978d-14ea5bcedea9
property: fields[1].value
- secretKey: cron_token
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: a1867c81-715c-47cd-978d-14ea5bcedea9
property: fields[2].value
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: firefly-data-importer-secrets
spec:
refreshInterval: 1h
target:
name: firefly-data-importer-secrets
creationPolicy: Owner
deletionPolicy: Delete
template:
type: Opaque
data:
ENABLE_BANKING_APP_ID: |-
{{ .app_id }}
ENABLE_BANKING_PRIVATE_KEY: |-
-----BEGIN PRIVATE KEY-----
{{ .private_key | replace "-----BEGIN PRIVATE KEY-----" "" | replace "-----END PRIVATE KEY-----" "" | replace " " "" | trim }}
-----END PRIVATE KEY-----
FIREFLY_III_ACCESS_TOKEN: |-
{{ .firefly_access_token }}
import.json: |-
{{ .import_config }}
data:
- secretKey: app_id
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: a1867c81-715c-47cd-978d-14ea5bcedea9
property: fields[3].value
- secretKey: private_key
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: a1867c81-715c-47cd-978d-14ea5bcedea9
property: fields[4].value
- secretKey: firefly_access_token
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: a1867c81-715c-47cd-978d-14ea5bcedea9
property: fields[5].value
- secretKey: import_config
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: a1867c81-715c-47cd-978d-14ea5bcedea9
property: fields[6].value