forked from ab/homelab
37 lines
862 B
YAML
37 lines
862 B
YAML
---
|
|
apiVersion: external-secrets.io/v1beta1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: oidc-creds
|
|
namespace: argocd
|
|
spec:
|
|
target:
|
|
name: oidc-creds
|
|
deletionPolicy: Delete
|
|
template:
|
|
type: Opaque
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/part-of: argocd
|
|
data:
|
|
id: "{{ .client_id | quote }}"
|
|
secret: "{{ .client_secret | quote }}"
|
|
data:
|
|
- secretKey: client_id
|
|
sourceRef:
|
|
storeRef:
|
|
name: vaultwarden-login
|
|
kind: ClusterSecretStore
|
|
remoteRef:
|
|
key: 1062e5b4-5380-49f1-97c3-340f26f3487e
|
|
property: fields[0].value
|
|
- secretKey: client_secret
|
|
sourceRef:
|
|
storeRef:
|
|
name: vaultwarden-login
|
|
kind: ClusterSecretStore
|
|
remoteRef:
|
|
key: 1062e5b4-5380-49f1-97c3-340f26f3487e
|
|
property: fields[1].value
|
|
|