update

authentik/templates/secrets.yaml

@@ -1,11 +1,11 @@
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
-  name: vault-authentik
+  name: authentik-secret
 spec:
   secretStoreRef:
-    name: vault-authentik
-    kind: SecretStore
+    name: vault
+    kind: ClusterSecretStore
   target:
     name: db-pass
   data:
@@ -26,20 +26,3 @@ spec:
       key: secrets/authentik/database
       property: dbpass
         
-
----
-
-apiVersion: external-secrets.io/v1beta1
-kind: SecretStore
-metadata:
-  name: vault-authentik
-spec:
-  provider:
-    vault:
-      server: "http://vault.vault.svc.cluster.local:8200"
-      path: "secrets"
-      version: "v2"
-      auth:
-        kubernetes:
-          mountPath: "kubernetes"
-          role: "external-secrets"

bitwarden/templates/secrets.yaml

@@ -4,8 +4,8 @@ metadata:
   name: bitwarden-secret
 spec:
   secretStoreRef:
-    name: vault-bitwarden
-    kind: SecretStore
+    name: vault
+    kind: ClusterSecretStore
   target:
     name: bitwarden-secret
   data:
@@ -14,20 +14,3 @@ spec:
       key: secrets/bitwarden/admin
       property: ADMIN_TOKEN
 
----
-
-apiVersion: external-secrets.io/v1beta1
-kind: SecretStore
-metadata:
-  name: vault-bitwarden
-spec:
-  provider:
-    vault:
-      server: "http://vault.vault.svc.cluster.local:8200"
-      path: "secrets"
-      version: "v2"
-      auth:
-        kubernetes:
-          mountPath: "kubernetes"
-          role: "external-secrets"
-

cert-manager/templates/sealedsecret.yaml

@@ -13,4 +13,21 @@ spec:
       creationTimestamp: null
       name: cloudflare-api-token-secret
       namespace: cert-manager
+---
+
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: cloudflare-api-token-secret
+spec:
+  secretStoreRef:
+    name: vault
+    kind: ClusterSecretStore
+  target:
+    name: cloudflare-api-token-secret
+  data:
+  - secretKey: cloudflare-api-token-secret
+    remoteRef:
+      key: secrets/cloudflare
+      property: cloudflare-api-token-secret
 

durpapi/templates/secrets.yaml

@@ -45,20 +45,3 @@ spec:
     remoteRef:
       key: secrets/durpapi/postgres
       property: db_name
-
-#---
-#
-#apiVersion: external-secrets.io/v1beta1
-#kind: SecretStore
-#metadata:
-#  name: vault-durpapi
-#spec:
-#  provider:
-#    vault:
-#      server: "http://vault.vault.svc.cluster.local:8200"
-#      path: "secrets"
-#      version: "v2"
-#      auth:
-#        kubernetes:
-#          mountPath: "kubernetes"
-#          role: "external-secrets"