update

2023-05-14 10:20:05 -05:00
parent dc7b05a2e8
commit 179eda4e9e
2 changed files with 53 additions and 3147 deletions
--- a/argocd/templates/secrets.yaml
+++ b/argocd/templates/secrets.yaml
@@ -0,0 +1,35 @@
+
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: vault-argocd
+  labels:
+    apps.kubernetes.io/part-of: argocd
+spec:
+  secretStoreRef:
+    name: vault-argocd
+    kind: SecretStore
+  target:
+    name: client-secret
+  data:
+  - secretKey: clientSecret
+    remoteRef:
+      key: argocd/authentik
+      property: clientsecret
+
+---
+
+apiVersion: external-secrets.io/v1beta1
+kind: SecretStore
+metadata:
+  name: vault-argocd
+spec:
+  provider:
+    vault:
+      server: "http://vault.vault.svc.cluster.local:8200"
+      path: "argocd"
+      version: "v2"
+      auth:
+        kubernetes:
+          mountPath: "kubernetes"
+          role: "external-secrets"