26 lines
702 B
YAML
26 lines
702 B
YAML
|
apiVersion: external-secrets.io/v1
|
||
|
|
kind: ExternalSecret
|
||
|
|
metadata:
|
||
|
|
name: kan-secrets
|
||
|
|
namespace: kan
|
||
|
|
spec:
|
||
|
|
refreshInterval: 1h
|
||
|
|
secretStoreRef:
|
||
|
|
name: aws-secrets-manager
|
||
|
|
kind: ClusterSecretStore
|
||
|
|
target:
|
||
|
|
name: kan-secrets
|
||
|
|
template:
|
||
|
|
data:
|
||
|
|
BETTER_AUTH_SECRET: "{{ `{{ .better_auth_secret }}` }}"
|
||
|
|
POSTGRES_URL: "postgresql://postgres:{{ `{{ .postgres_password }}` }}@postgres.postgres.svc.cluster.local:5432/kan?sslmode=disable"
|
||
|
|
data:
|
||
|
|
- secretKey: better_auth_secret
|
||
|
|
remoteRef:
|
||
|
|
key: dumpnet
|
||
|
|
property: kan.better_auth_secret
|
||
|
|
- secretKey: postgres_password
|
||
|
|
remoteRef:
|
||
|
|
key: dumpnet
|
||
|
|
property: postgres.password
|