28 lines
894 B
YAML
28 lines
894 B
YAML
{{- $host := .Values.registry.host }}
|
|
{{- $user := .Values.registry.user }}
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: forgejo-registry
|
|
namespace: mcp
|
|
annotations:
|
|
argocd.argoproj.io/sync-wave: "-1"
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
name: aws-secrets-manager
|
|
kind: ClusterSecretStore
|
|
target:
|
|
name: forgejo-registry
|
|
type: kubernetes.io/dockerconfigjson
|
|
template:
|
|
engineVersion: v2
|
|
mergePolicy: Replace
|
|
data:
|
|
# When forking: update host/user to match your registry
|
|
.dockerconfigjson: '{"auths":{"{{ $host }}":{"username":"{{ $user }}","password":"{{ "{{" }} .registry_token {{ "}}" }}","auth":"{{ "{{" }} printf "{{ $user }}:%s" .registry_token | b64enc {{ "}}" }}"}}}'
|
|
data:
|
|
- secretKey: registry_token
|
|
remoteRef:
|
|
key: dumpnet
|
|
property: forgejo.registry_token
|