External Secrets setup

Setup the external secrets helm charts Convert hard coded secrets to external secrets Add BitWarden CLI for serving external secrets
2025-05-26 17:10:01 -05:00
parent 3110cff93c
commit ce5f604636
23 changed files with 320 additions and 24 deletions
@@ -0,0 +1,33 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: postgres-user-pgadmin
+  namespace: db
+spec:
+  target:
+    name: postgres-user-pgadmin
+    deletionPolicy: Delete
+    template:
+      type: Opaque
+      data:
+        username: |-
+          {{ .username }}
+        password: |-
+          {{ .password }}
+  data:
+    - secretKey: username
+      sourceRef:
+        storeRef:
+          name: bitwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: f333d637-1667-499d-b9a0-b2e9012bd8b7
+        property: username
+    - secretKey: password
+      sourceRef:
+        storeRef:
+          name: bitwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: f333d637-1667-499d-b9a0-b2e9012bd8b7
+        property: password