Files
homelab/kube-prometheus-stack/templates/grafana-secrets-sealed.yaml
2023-07-25 09:32:29 -05:00

42 lines
1.0 KiB
YAML

apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: vault-grafana-oauth
spec:
secretStoreRef:
name: vault
kind: ClusterSecretStore
target:
name: grafana-oauth
data:
- secretKey: GF_AUTH_GENERIC_OAUTH_CLIENT_ID
remoteRef:
key: secrets/kube-prometheus/grafana/oauth
property: GF_AUTH_GENERIC_OAUTH_CLIENT_ID
- secretKey: GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET
remoteRef:
key: secrets/kube-prometheus/grafana/oauth
property: GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET
---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: vault-admin-credentials
spec:
secretStoreRef:
name: vault
kind: ClusterSecretStore
target:
name: grafana-admin-credentials
data:
- secretKey: admin-password
remoteRef:
key: secrets/kube-prometheus/grafana/admin
property: admin-password
- secretKey: admin-user
remoteRef:
key: secrets/kube-prometheus/grafana/admin
property: admin-user