23 lines
576 B
YAML
23 lines
576 B
YAML
|
apiVersion: external-secrets.io/v1
|
||
|
|
kind: ExternalSecret
|
||
|
|
metadata:
|
||
|
|
name: opengist-secrets
|
||
|
|
namespace: opengist
|
||
|
|
annotations:
|
||
|
|
argocd.argoproj.io/sync-wave: "-1"
|
||
|
|
spec:
|
||
|
|
refreshInterval: 1h
|
||
|
|
secretStoreRef:
|
||
|
|
name: aws-secrets-manager
|
||
|
|
kind: ClusterSecretStore
|
||
|
|
target:
|
||
|
|
name: opengist-secrets
|
||
|
|
template:
|
||
|
|
data:
|
||
|
|
OG_DB_URI: "postgres://postgres:{{ `{{ .postgres_password }}` }}@postgres.postgres.svc.cluster.local:5432/opengist"
|
||
|
|
data:
|
||
|
|
- secretKey: postgres_password
|
||
|
|
remoteRef:
|
||
|
|
key: dumpnet
|
||
|
|
property: postgres.password
|