new file: infrastructure/cert-manager/external-secret.yaml
new file: infrastructure/external-secrets-app.yaml new file: infrastructure/external-secrets-config-app.yaml new file: infrastructure/external-secrets/cluster-secret-store.yaml
This commit is contained in:
18
infrastructure/cert-manager/external-secret.yaml
Normal file
18
infrastructure/cert-manager/external-secret.yaml
Normal file
@@ -0,0 +1,18 @@
|
||||
apiVersion: external-secrets.io/v1beta1
|
||||
kind: ExternalSecret
|
||||
metadata:
|
||||
name: cloudflare-api-token-secret
|
||||
namespace: cert-manager # Hier braucht es Cert-Manager
|
||||
spec:
|
||||
refreshInterval: "1h"
|
||||
secretStoreRef:
|
||||
name: vault-backend
|
||||
kind: ClusterSecretStore
|
||||
target:
|
||||
name: cloudflare-api-token-secret # Name des K8s Secrets
|
||||
creationPolicy: Owner
|
||||
data:
|
||||
- secretKey: api-token # Key im K8s Secret
|
||||
remoteRef:
|
||||
key: secret/infrastructure/opnsense # Pfad im Vault
|
||||
property: dns_api_token # Key im Vault
|
||||
Reference in New Issue
Block a user