k8s/secrets/fireflysecrets.yaml
2026-04-07 19:08:38 +12:00

37 lines
941 B
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: firefly-secrets
namespace: firefly
spec:
refreshInterval: 1h
secretStoreRef:
name: bitwarden
kind: ClusterSecretStore
target:
name: firefly-secrets
creationPolicy: Owner
template:
engineVersion: v2
mergePolicy: Merge
data:
db_username: firefly
db_password: '{{ index . "firefly-db-password" }}'
app_key: '{{ index . "firefly-app-key" }}'
cron_token: '{{ index . "firefly-cron-token" }}'
gmail_pass: '{{ index . "gmail-app-password" }}'
data:
- secretKey: firefly-db-password
remoteRef:
key: firefly-db-password
- secretKey: firefly-app-key
remoteRef:
key: firefly-app-key
- secretKey: firefly-cron-token
remoteRef:
key: firefly-cron-token
- secretKey: gmail-app-password
remoteRef:
key: gmail-app-password