2026-08-19 10:38:25 -04:00
|
|
|
apiVersion: external-secrets.io/v1
|
|
|
|
|
kind: ExternalSecret
|
|
|
|
|
metadata:
|
|
|
|
|
name: kan-secrets
|
|
|
|
|
namespace: kan
|
2026-08-19 11:07:32 -04:00
|
|
|
annotations:
|
|
|
|
|
argocd.argoproj.io/sync-wave: "-1"
|
2026-08-19 10:38:25 -04:00
|
|
|
spec:
|
|
|
|
|
refreshInterval: 1h
|
|
|
|
|
secretStoreRef:
|
|
|
|
|
name: aws-secrets-manager
|
|
|
|
|
kind: ClusterSecretStore
|
|
|
|
|
target:
|
|
|
|
|
name: kan-secrets
|
|
|
|
|
template:
|
|
|
|
|
data:
|
|
|
|
|
BETTER_AUTH_SECRET: "{{ `{{ .better_auth_secret }}` }}"
|
|
|
|
|
POSTGRES_URL: "postgresql://postgres:{{ `{{ .postgres_password }}` }}@postgres.postgres.svc.cluster.local:5432/kan?sslmode=disable"
|
|
|
|
|
data:
|
|
|
|
|
- secretKey: better_auth_secret
|
|
|
|
|
remoteRef:
|
|
|
|
|
key: dumpnet
|
|
|
|
|
property: kan.better_auth_secret
|
|
|
|
|
- secretKey: postgres_password
|
|
|
|
|
remoteRef:
|
|
|
|
|
key: dumpnet
|
|
|
|
|
property: postgres.password
|
