From db3bcc2ec33b599113b80513c47e7d622a1ba38d Mon Sep 17 00:00:00 2001 From: j37hr0 Date: Mon, 4 May 2026 18:22:17 +1200 Subject: [PATCH] refactor ceph-secret --- ceph-secret.yaml | 8 -------- secrets/ceph-secret.yaml | 22 ++++++++++++++++++++++ secrets/kustomization.yaml | 1 + 3 files changed, 23 insertions(+), 8 deletions(-) delete mode 100644 ceph-secret.yaml create mode 100644 secrets/ceph-secret.yaml diff --git a/ceph-secret.yaml b/ceph-secret.yaml deleted file mode 100644 index 954bf14..0000000 --- a/ceph-secret.yaml +++ /dev/null @@ -1,8 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: csi-rbd-secret - namespace: kube-system -stringData: - userID: k8s - userKey: AQAVVqJprYZeFBAALRdX3gJGaN/5kRNnVVadHw== diff --git a/secrets/ceph-secret.yaml b/secrets/ceph-secret.yaml new file mode 100644 index 0000000..34bf694 --- /dev/null +++ b/secrets/ceph-secret.yaml @@ -0,0 +1,22 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: csi-rbd-secret + namespace: kube-system +spec: + refreshInterval: 1h + secretStoreRef: + name: bitwarden + kind: ClusterSecretStore + target: + name: csi-rbd-secret + creationPolicy: Owner + template: + engineVersion: v2 + mergePolicy: Merge + data: + userID: k8s + data: + - secretKey: userKey + remoteRef: + key: ceph-userkey diff --git a/secrets/kustomization.yaml b/secrets/kustomization.yaml index c313b54..c1c9e5c 100644 --- a/secrets/kustomization.yaml +++ b/secrets/kustomization.yaml @@ -2,3 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - namespace.yaml +- ceph-secret.yaml