Greg Hellings
ce5f604636
Setup the external secrets helm charts Convert hard coded secrets to external secrets Add BitWarden CLI for serving external secrets
34 lines
776 B
YAML
34 lines
776 B
YAML
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: postgres-user-gitlab
|
|
namespace: db
|
|
spec:
|
|
target:
|
|
name: postgres-user-gitlab
|
|
deletionPolicy: Delete
|
|
template:
|
|
type: Opaque
|
|
data:
|
|
username: |-
|
|
{{ .username }}
|
|
password: |-
|
|
{{ .password }}
|
|
data:
|
|
- secretKey: username
|
|
sourceRef:
|
|
storeRef:
|
|
name: bitwarden-login
|
|
kind: ClusterSecretStore
|
|
remoteRef:
|
|
key: 5282ad16-c2dc-49d3-8fb3-b2e9012bab57
|
|
property: username
|
|
- secretKey: password
|
|
sourceRef:
|
|
storeRef:
|
|
name: bitwarden-login
|
|
kind: ClusterSecretStore
|
|
remoteRef:
|
|
key: 5282ad16-c2dc-49d3-8fb3-b2e9012bab57
|
|
property: password
|