Use nixhelm repo, add tailscale to autodeploy

2025-09-11 21:39:53 -05:00
parent 5992fa86c0
commit 52189eff57
4 changed files with 53 additions and 7 deletions
@@ -16,7 +16,6 @@ helm upgrade --install cnpg \
    -f values/cnpg.yaml \
    --wait
 sleep 5
-./tailscale/apply.sh
 kubectl apply -k .

 ./immich/apply.sh
@@ -0,0 +1,33 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: operator-oauth
+  namespace: tailscale
+spec:
+  target:
+    name: operator-oauth
+    deletionPolicy: Delete
+    template:
+      type: kubernetes.io/basic-auth
+      data:
+        username: |-
+          {{ .username }}
+        password: |-
+          {{ .password }}
+  data:
+    - secretKey: username
+      sourceRef:
+        storeRef:
+          name: bitwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: ffa188a4-63b2-4926-99f0-b33b0021a4f4
+        property: username
+    - secretKey: password
+      sourceRef:
+        storeRef:
+          name: bitwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: ffa188a4-63b2-4926-99f0-b33b0021a4f4
+        property: password