k8s/secrets/kimaisecrets.yaml

38 lines
984 B
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: kimai-secrets
namespace: kimai
spec:
refreshInterval: 1h
secretStoreRef:
name: bitwarden
kind: ClusterSecretStore
target:
name: kimai-secrets
creationPolicy: Owner
template:
engineVersion: v2
mergePolicy: Merge
data:
app-secret: '{{ index . "kimai-admin-password" }}'
admin-password: '{{ index . "kimai-admin-password" }}'
mailer-url: 'null://localhost'
database-url: 'mysql://kimai:{{ index . "mariadb-password" }}@kimai-mariadb/kimai?charset=utf8&serverVersion=10.6'
data:
- secretKey: mariadb-root-password
remoteRef:
key: kimai-db-root-password
- secretKey: mariadb-password
remoteRef:
key: kimai-db-password
- secretKey: kimai-admin-username
remoteRef:
key: kimai-admin-username
- secretKey: kimai-admin-password
remoteRef:
key: kimai-admin-password