k8s/apps/lubelogger/db/lubelogger-db-secrets.yaml

33 lines
814 B
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: lubelogger-db-secrets
namespace: pg-databases
spec:
refreshInterval: 1h
secretStoreRef:
name: bitwarden
kind: ClusterSecretStore
target:
name: lubelogger-db-secrets
creationPolicy: Owner
template:
engineVersion: v2
mergePolicy: Merge
data:
database: '{{ index . "lubelogger-db-name" }}'
username: '{{ index . "lubelogger-db-username" }}'
password: '{{ index . "lubelogger-db-password" }}'
data:
- secretKey: lubelogger-db-name
remoteRef:
key: lubelogger-db-name
- secretKey: lubelogger-db-username
remoteRef:
key: lubelogger-db-username
- secretKey: lubelogger-db-password
remoteRef:
key: lubelogger-db-password