refactor secrets locations, create basic structure for kimai db

apps/fireflyiii/kustomization.yaml

@@ -8,3 +8,4 @@ resources:
 - pvc.yaml
 - service.yaml
 - db
+- fireflysecrets.yaml

apps/kimai/db/database.yaml

@@ -0,0 +1,10 @@
+apiVersion: k8s.mariadb.com/v1alpha1
+kind: Database
+metadata:
+  name: kimai
+  namespace: kimai
+spec:
+  mariaDbRef:
+    name: mariadb
+
+  name: kimai

apps/kimai/db/grant.yaml

@@ -0,0 +1,17 @@
+apiVersion: k8s.mariadb.com/v1alpha1
+kind: Grant
+metadata:
+  name: kimai
+  namespace: kimai
+spec:
+  mariaDbRef:
+    name: mariadb
+
+  privileges:
+    - ALL PRIVILEGES
+
+  database: kimai
+  table: "*"
+
+  username: kimai
+  host: "%"

apps/kimai/db/kustomization.yaml

@@ -0,0 +1,5 @@
+resources:
+- datbase.yaml
+- user.yaml
+- grant.yaml
+- secret.yaml

apps/kimai/db/secret.yaml

@@ -0,0 +1,23 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: kimai-db-secrets
+  namespace: kimai
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: bitwarden
+    kind: ClusterSecretStore
+
+  target:
+    name: kimai-db-secrets
+    creationPolicy: Owner
+    template:
+      engineVersion: v2
+      data:
+        password: '{{ index . "kimai-db-password" }}'
+
+  data:
+    - secretKey: kimai-db-password
+      remoteRef:
+        key: kimai-db-password

apps/kimai/db/user.yaml

@@ -0,0 +1,16 @@
+apiVersion: k8s.mariadb.com/v1alpha1
+kind: User
+metadata:
+  name: kimai
+  namespace: kimai
+spec:
+  mariaDbRef:
+    name: mariadb
+
+  name: kimai
+
+  passwordSecretKeyRef:
+    name: kimai-db-secrets
+    key: password
+
+  host: "%"

apps/kimai/kustomization.yaml

@@ -2,6 +2,8 @@ resources:
 - namespace.yaml
 - helmrepository.yaml
 - helmrelease.yaml
+- db
+- kimaisecrets.yaml
 
 namespace: kimai
 

infrastructure/databases/kustomization.yaml

@@ -3,3 +3,4 @@ kind: Kustomization
 resources:
 - cloudnative-pg
 - mariadb-operator
+- mariadb-clustersecrets.yaml

infrastructure/velero/kustomization.yaml

@@ -2,9 +2,9 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
 - namespace.yaml
-#- values.yaml
 - helmrelease.yaml
 - schedules
+- velerosecrets.yaml
 
 namespace: velero