diff --git a/external-dns/templates/secrets.yaml b/external-dns/templates/secrets.yaml index e53b0ce..42ade25 100644 --- a/external-dns/templates/secrets.yaml +++ b/external-dns/templates/secrets.yaml @@ -4,7 +4,7 @@ metadata: name: external-dns spec: secretStoreRef: - name: vault-gitlab + name: vault kind: SecretStore target: name: external-dns @@ -27,7 +27,7 @@ spec: apiVersion: external-secrets.io/v1beta1 kind: SecretStore metadata: - name: vault-gitlab + name: vault spec: provider: vault: diff --git a/heimdall/templates/test.yaml b/heimdall/templates/test.yaml index a1a2bf8..63cd892 100644 --- a/heimdall/templates/test.yaml +++ b/heimdall/templates/test.yaml @@ -1,4 +1,3 @@ ---- kind: Service apiVersion: v1 metadata: @@ -7,4 +6,42 @@ metadata: external-dns.alpha.kubernetes.io/hostname: whoami.durp.info spec: type: ExternalName - externalName: 1.2.3.4 \ No newline at end of file + externalName: + secretKeyRef: + name: my-secret + key: ip-address + +--- + +apiVersion: external-secrets.io/v1beta1 +kind: ExternalSecret +metadata: + name: my-secret +spec: + secretStoreRef: + name: vault + kind: SecretStore + target: + name: my-secret + data: + - secretKey: ip-address + remoteRef: + key: secrets/external-dns/ip-address + property: ip-address + +--- + +apiVersion: external-secrets.io/v1beta1 +kind: SecretStore +metadata: + name: vault +spec: + provider: + vault: + server: "http://vault.vault.svc.cluster.local:8200" + path: "secrets" + version: "v2" + auth: + kubernetes: + mountPath: "kubernetes" + role: "external-secrets" \ No newline at end of file