k8s/apps/kimai/kimaisecrets.yaml
2026-04-25 17:34:26 +12:00

45 lines
1.3 KiB
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: kimai-secrets
namespace: kimai
spec:
refreshInterval: 1h
secretStoreRef:
name: bitwarden
kind: ClusterSecretStore
target:
name: kimai-secrets
creationPolicy: Owner
template:
engineVersion: v2
mergePolicy: Merge
data:
app-secret: '{{ index . "kimai-app-secret" }}'
admin-email: '{{ index . "kimai-admin-username" }}'
admin-password: '{{ index . "kimai-admin-password" }}'
mailer-url: 'null://localhost'
database-url: 'mysql://kimai:{{ index . "mariadb-password" | urlquery }}@mariadb.mariadb-databases.svc.cluster.local/kimai?charset=utf8&serverVersion=mariadb-10.5.11'
password: '{{ index . "mariadb-password" }}'
root-password: '{{ index . "mariadb-root-password" }}'
data:
- secretKey: mariadb-root-password
remoteRef:
key: kimai-db-root-password
- secretKey: mariadb-password
remoteRef:
key: kimai-db-password
- secretKey: kimai-admin-username
remoteRef:
key: kimai-admin-username
- secretKey: kimai-admin-password
remoteRef:
key: kimai-admin-password
- secretKey: kimai-app-secret
remoteRef:
key: kimai-app-secret