From 246558a0dd4dd35316821380d9af971225a28a05 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 13 May 2023 13:37:49 +0000 Subject: [PATCH] Update 3 files - /longhorn/templates/longhorn-minio-sealed.yaml - /longhorn/templates/secrets.yaml - /argocd/templates/sealed-secrets.yaml --- argocd/templates/sealed-secrets.yaml | 45 +++++++------- longhorn/templates/longhorn-minio-sealed.yaml | 60 ------------------- longhorn/templates/secrets.yaml | 41 +++++++++++++ 3 files changed, 64 insertions(+), 82 deletions(-) delete mode 100644 longhorn/templates/longhorn-minio-sealed.yaml create mode 100644 longhorn/templates/secrets.yaml diff --git a/argocd/templates/sealed-secrets.yaml b/argocd/templates/sealed-secrets.yaml index 6f70d5d..96633c0 100644 --- a/argocd/templates/sealed-secrets.yaml +++ b/argocd/templates/sealed-secrets.yaml @@ -1,22 +1,23 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: sealed-secrets - namespace: argocd -spec: - project: default - source: - repoURL: https://gitlab.com/developerdurp/homelab.git - targetRevision: main - path: sealed-secrets - directory: - recurse: true - destination: - server: https://kubernetes.default.svc - namespace: sealed-secrets - syncPolicy: - automated: - prune: true - selfHeal: true - syncOptions: - - CreateNamespace=true +#apiVersion: argoproj.io/v1alpha1 +#kind: Application +#metadata: +# name: sealed-secrets +# namespace: argocd +#spec: +# project: default +# source: +# repoURL: https://gitlab.com/developerdurp/homelab.git +# targetRevision: main +# path: sealed-secrets +# directory: +# recurse: true +# destination: +# server: https://kubernetes.default.svc +# namespace: sealed-secrets +# syncPolicy: +# automated: +# prune: true +# selfHeal: true +# syncOptions: +# - CreateNamespace=true +# \ No newline at end of file diff --git a/longhorn/templates/longhorn-minio-sealed.yaml b/longhorn/templates/longhorn-minio-sealed.yaml deleted file mode 100644 index 9ac4d99..0000000 --- a/longhorn/templates/longhorn-minio-sealed.yaml +++ /dev/null @@ -1,60 +0,0 @@ -#apiVersion: bitnami.com/v1alpha1 -#kind: SealedSecret -#metadata: -# creationTimestamp: null -# name: longhorn-backup-token-secret -# namespace: longhorn-system -#spec: -# encryptedData: -# AWS_ACCESS_KEY_ID: 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 -# AWS_ENDPOINTS: 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 -# AWS_SECRET_ACCESS_KEY: AgA4GmNtldp7PK35ra7HwavACWRZ03jr/3GLAiEB/Ff5Cmc0A3cjj+Mb4/+xUf11DS07AWlCs3aIcnyQ7DRtdQChIUK1ZYnDRPMBz/uH6BbIrWlqlDz5wRg5GZ5pUrK9hHxa9cj3MBaJIjl5WnPuFszFwz2y5LkeghiVIsy4zgFbvKyyE4HNR2lZFmzihH384JlYhm60zXu8+nTvIlRx/8AHxLvnXCld94odbSzd91+Vj5FN6I+05BiGqlAM4jzU9eUBKMckOKig22JXQIPIeMjYUh59J59OPK3UxC/+SFUWcr4hZBskM9KLF9OCb145C73yZBNFBkE4VgoKb+YcvgzdS6NrzzId+E22lubwEBHN8SYpWFihtZmjUzg/Dx0/w5IDkXROUK0zuxuj67OuzLFkgBR0F7+yqZXsf5ysYhW1z3ibeppfhzTTwiwN2JdWLc+fAt0UsHWv9GH7+ryGQ/Yq+w/3o6wWcBWCe5CU7bEu4rDQ8hdrwftTvBYrQziU4PaAk9AOMg0tMoGPWv06Kzf7wTPhVTAxdBuOMJNmkWDzs0RIMEf0V+MyVqZ36TlSg45RriX+Zv7TUnkrHiuhBFtkFj2muCP9SeaoPxFn4YGT2J4p3LNYY/2YGhaofQYFbmyb2IFSGViLe5jf0M4vM2i08CvKT1hH8cX6agEYK/TOU1DXkLPz6F2ir2W10v6AF2Eml94ZIFEB8jn5FKVHItnvYqEu+wB9wk0pCcQV4VDjQg== -# template: -# data: null -# metadata: -# creationTimestamp: null -# name: longhorn-backup-token-secret -# namespace: longhorn-system -# -#--- - -apiVersion: external-secrets.io/v1beta1 -kind: ExternalSecret -metadata: - name: external-longhorn-backup-token-secret -spec: - secretStoreRef: - name: vault-longhorn - kind: SecretStore - target: - name: longhorn-backup-token-secret - data: - - secretKey: AWS_ACCESS_KEY_ID - remoteRef: - key: longhorn/backup - property: AWS_ACCESS_KEY_ID - - secretKey: AWS_ENDPOINTS - remoteRef: - key: longhorn/backup - property: AWS_ENDPOINTS - - secretKey: AWS_SECRET_ACCESS_KEY - remoteRef: - key: longhorn/backup - property: AWS_SECRET_ACCESS_KEY - ---- - -apiVersion: external-secrets.io/v1beta1 -kind: SecretStore -metadata: - name: vault-longhorn -spec: - provider: - vault: - server: "http://vault.vault.svc.cluster.local:8200" - path: "longhorn" - version: "v2" - auth: - kubernetes: - mountPath: "kubernetes" - role: "external-secrets" \ No newline at end of file diff --git a/longhorn/templates/secrets.yaml b/longhorn/templates/secrets.yaml new file mode 100644 index 0000000..86a68e2 --- /dev/null +++ b/longhorn/templates/secrets.yaml @@ -0,0 +1,41 @@ + +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: external-longhorn-backup-token-secret +spec: + secretStoreRef: + name: vault-longhorn + kind: SecretStore + target: + name: longhorn-backup-token-secret + data: + - secretKey: AWS_ACCESS_KEY_ID + remoteRef: + key: longhorn/backup + property: AWS_ACCESS_KEY_ID + - secretKey: AWS_ENDPOINTS + remoteRef: + key: longhorn/backup + property: AWS_ENDPOINTS + - secretKey: AWS_SECRET_ACCESS_KEY + remoteRef: + key: longhorn/backup + property: AWS_SECRET_ACCESS_KEY + +--- + +apiVersion: external-secrets.io/v1beta1 +kind: SecretStore +metadata: + name: vault-longhorn +spec: + provider: + vault: + server: "http://vault.vault.svc.cluster.local:8200" + path: "longhorn" + version: "v2" + auth: + kubernetes: + mountPath: "kubernetes" + role: "external-secrets" \ No newline at end of file