45 lines
1.3 KiB
YAML
45 lines
1.3 KiB
YAML
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: kan-secrets
|
|
namespace: kan
|
|
annotations:
|
|
argocd.argoproj.io/sync-wave: "-1"
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
name: aws-secrets-manager
|
|
kind: ClusterSecretStore
|
|
target:
|
|
name: kan-secrets
|
|
template:
|
|
data:
|
|
BETTER_AUTH_SECRET: "{{ `{{ .better_auth_secret }}` }}"
|
|
POSTGRES_URL: "postgresql://postgres:{{ `{{ .postgres_password }}` }}@postgres.postgres.svc.cluster.local:5432/kan?sslmode=disable"
|
|
SMTP_HOST: "{{ `{{ .ses_smtp_endpoint }}` }}"
|
|
SMTP_PORT: "587"
|
|
SMTP_USER: "{{ `{{ .ses_smtp_user }}` }}"
|
|
SMTP_PASSWORD: "{{ `{{ .ses_smtp_password }}` }}"
|
|
SMTP_SECURE: "false"
|
|
EMAIL_FROM: "noreply@{{ .Values.domain }}"
|
|
data:
|
|
- secretKey: better_auth_secret
|
|
remoteRef:
|
|
key: dumpnet
|
|
property: kan.better_auth_secret
|
|
- secretKey: postgres_password
|
|
remoteRef:
|
|
key: dumpnet
|
|
property: postgres.password
|
|
- secretKey: ses_smtp_endpoint
|
|
remoteRef:
|
|
key: dumpnet
|
|
property: ses.smtp_endpoint
|
|
- secretKey: ses_smtp_user
|
|
remoteRef:
|
|
key: dumpnet
|
|
property: ses.smtp_user
|
|
- secretKey: ses_smtp_password
|
|
remoteRef:
|
|
key: dumpnet
|
|
property: ses.smtp_password
|