50 lines
1.2 KiB
YAML
50 lines
1.2 KiB
YAML
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: firefly-secrets
|
|
spec:
|
|
refreshInterval: 1h
|
|
target:
|
|
name: firefly-secrets
|
|
creationPolicy: Owner
|
|
deletionPolicy: Delete
|
|
template:
|
|
type: Opaque
|
|
data:
|
|
# Firefly and CloudNativePG deliberately share this generated Secret.
|
|
username: firefly
|
|
password: |-
|
|
{{ .db_password }}
|
|
DB_PASSWORD: |-
|
|
{{ .db_password }}
|
|
APP_KEY: |-
|
|
{{ .app_key }}
|
|
STATIC_CRON_TOKEN: |-
|
|
{{ .cron_token }}
|
|
data:
|
|
- secretKey: db_password
|
|
sourceRef:
|
|
storeRef:
|
|
name: vaultwarden-login
|
|
kind: ClusterSecretStore
|
|
remoteRef:
|
|
key: a1867c81-715c-47cd-978d-14ea5bcedea9
|
|
property: fields[0].value
|
|
- secretKey: app_key
|
|
sourceRef:
|
|
storeRef:
|
|
name: vaultwarden-login
|
|
kind: ClusterSecretStore
|
|
remoteRef:
|
|
key: a1867c81-715c-47cd-978d-14ea5bcedea9
|
|
property: fields[1].value
|
|
- secretKey: cron_token
|
|
sourceRef:
|
|
storeRef:
|
|
name: vaultwarden-login
|
|
kind: ClusterSecretStore
|
|
remoteRef:
|
|
key: a1867c81-715c-47cd-978d-14ea5bcedea9
|
|
property: fields[2].value
|
|
|