From 868ceddb22c2f578a17cb1e6e47ae084f32806b4 Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sat, 20 Sep 2025 07:51:38 -0500 Subject: [PATCH] update secrets --- .../templates/grafana-secrets-sealed.yaml | 41 +++++++++++-------- 1 file changed, 23 insertions(+), 18 deletions(-) diff --git a/infra/kube-prometheus-stack/templates/grafana-secrets-sealed.yaml b/infra/kube-prometheus-stack/templates/grafana-secrets-sealed.yaml index 7f01c1e..a499d01 100644 --- a/infra/kube-prometheus-stack/templates/grafana-secrets-sealed.yaml +++ b/infra/kube-prometheus-stack/templates/grafana-secrets-sealed.yaml @@ -1,3 +1,9 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: vault + +--- apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: @@ -9,17 +15,16 @@ spec: target: name: grafana-oauth data: - - secretKey: GF_AUTH_GENERIC_OAUTH_CLIENT_ID - remoteRef: - key: secrets/kube-prometheus/grafana/oauth - property: GF_AUTH_GENERIC_OAUTH_CLIENT_ID - - secretKey: GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET - remoteRef: - key: secrets/kube-prometheus/grafana/oauth - property: GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET - ---- + - secretKey: GF_AUTH_GENERIC_OAUTH_CLIENT_ID + remoteRef: + key: secrets/grafana/oauth + property: GF_AUTH_GENERIC_OAUTH_CLIENT_ID + - secretKey: GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET + remoteRef: + key: secrets/grafana/oauth + property: GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET +--- apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: @@ -31,11 +36,11 @@ spec: target: name: grafana-admin-credentials data: - - secretKey: admin-password - remoteRef: - key: secrets/kube-prometheus/grafana/admin - property: admin-password - - secretKey: admin-user - remoteRef: - key: secrets/kube-prometheus/grafana/admin - property: admin-user + - secretKey: admin-password + remoteRef: + key: secrets/grafana/admin + property: admin-password + - secretKey: admin-user + remoteRef: + key: secrets/grafana/admin + property: admin-user