Greg Hellings
ce5f604636
Setup the external secrets helm charts Convert hard coded secrets to external secrets Add BitWarden CLI for serving external secrets
46 lines
1.2 KiB
YAML
46 lines
1.2 KiB
YAML
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ClusterSecretStore
|
|
metadata:
|
|
name: bitwarden-login
|
|
spec:
|
|
provider:
|
|
webhook:
|
|
url: "http://bitwarden-cli.bitwarden.svc.cluster.local:8087/object/item/{{ .remoteRef.key }}"
|
|
headers:
|
|
Content-Type: application/json
|
|
result:
|
|
jsonPath: "$.data.login.{{ .remoteRef.property }}"
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ClusterSecretStore
|
|
metadata:
|
|
name: bitwarden-fields
|
|
spec:
|
|
provider:
|
|
webhook:
|
|
url: "http://bitwarden-cli.bitwarden.svc.cluster.local:8087/object/item/{{ .remoteRef.key }}"
|
|
result:
|
|
jsonPath: '$.data.fields[?@.name=="{{ .remoteRef.property }}"].value'
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ClusterSecretStore
|
|
metadata:
|
|
name: bitwarden-notes
|
|
spec:
|
|
provider:
|
|
webhook:
|
|
url: "http://bitwarden-cli.bitwarden.svc.cluster.local:8087/object/item/{{ .remoteRef.key }}"
|
|
result:
|
|
jsonPath: "$.data.notes"
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ClusterSecretStore
|
|
metadata:
|
|
name: bitwarden-attachments
|
|
spec:
|
|
provider:
|
|
webhook:
|
|
url: "http://bitwarden-cli.bitwarden.svc.cluster.local:8087/object/attachment/{{ .remoteRef.property }}?itemid={{ .remoteRef.key }}"
|
|
result: {}
|