Files
homelab/k8s/core/prometheus/external-secrets.yaml
Ultradesu 5031ec5643
All checks were successful
Check with kubeconform / lint (push) Successful in 5s
Got rid of NS in resources PROM
2025-04-13 19:31:40 +01:00

82 lines
2.2 KiB
YAML

---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: grafana-admin
spec:
target:
name: grafana-admin
deletionPolicy: Delete
template:
type: Opaque
data:
GF_SERVER_ROOT_URL: https://gf.hexor.cy
GF_DATABASE_USER: grafana
password: |-
{{ .password }}
username: |-
{{ .username }}
GF_AUTH_GENERIC_OAUTH_CLIENT_ID: |-
{{ .client_id }}
GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET: |-
{{ .client_secret }}
GF_DATABASE_PASSWORD: |-
{{ .psql_user }}
data:
- secretKey: password
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
key: 6a03357b-616e-4973-897a-93ccd675ddcb
property: login.password
- secretKey: username
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
key: 6a03357b-616e-4973-897a-93ccd675ddcb
property: login.username
- secretKey: client_id
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
key: 6a03357b-616e-4973-897a-93ccd675ddcb
property: fields[0].value
- secretKey: client_secret
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
key: 6a03357b-616e-4973-897a-93ccd675ddcb
property: fields[1].value
- secretKey: psql_user
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
key: 2a9deb39-ef22-433e-a1be-df1555625e22
property: fields[2].value