Files
homelab/durpapi/templates/secrets.yaml

64 lines
1.5 KiB
YAML

apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: vault-durpapi
spec:
secretStoreRef:
name: vault-durpapi
kind: SecretStore
target:
name: durpapi-secret
data:
- secretKey: openai_api_key
remoteRef:
key: secrets/durpapi/openai
property: openai_api_key
- secretKey: unraid_api_key
remoteRef:
key: secrets/durpapi/unraid
property: unraid_api_key
- secretKey: unraid_uri
remoteRef:
key: secrets/durpapi/unraid
property: unraid_uri
- secretKey: db_host
remoteRef:
key: secrets/durpapi/postgres
property: db_host
- secretKey: db_port
remoteRef:
key: secrets/durpapi/postgres
property: db_port
- secretKey: db_pass
remoteRef:
key: secrets/durpapi/postgres
property: db_pass
- secretKey: db_user
remoteRef:
key: secrets/durpapi/postgres
property: db_user
- secretKey: db_sslmode
remoteRef:
key: secrets/durpapi/postgres
property: db_sslmode
- secretKey: db_name
remoteRef:
key: secrets/durpapi/postgres
property: db_name
---
apiVersion: external-secrets.io/v1beta1
kind: SecretStore
metadata:
name: vault-durpapi
spec:
provider:
vault:
server: "http://vault.vault.svc.cluster.local:8200"
path: "secrets"
version: "v2"
auth:
kubernetes:
mountPath: "kubernetes"
role: "external-secrets"