fixup! ♻️ migration externalsecrets

kubernetes/apps/networking/external-dns/app/externalsecret.yaml

@@ -0,0 +1,23 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: external-dns
+  namespace: networking
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-connect
+  target:
+    name: external-dns-secret
+    creationPolicy: Owner
+    template:
+      engineVersion: v2
+      data:
+        OVH_APPLICATION_KEY: "{{ .OVH_APPLICATION_KEY }}"
+        OVH_APPLICATION_SECRET: "{{ .OVH_APPLICATION_SECRET }}"
+        OVH_CONSUMER_KEY: "{{ .OVH_CONSUMMER_KEY }}"
+  dataFrom:
+    - extract:
+        key: external-dns

kubernetes/apps/networking/external-dns/app/helmrelease.yaml

@@ -6,7 +6,7 @@ metadata:
   name: external-dns
   namespace: networking
 spec:
-  interval: 15m
+  interval: 30m
   chart:
     spec:
       chart: external-dns
@@ -15,7 +15,7 @@ spec:
         kind: HelmRepository
         name: external-dns
         namespace: flux-system
-  maxHistory: 3
+  maxHistory: 2
   install:
     createNamespace: true
     remediation:
@@ -34,18 +34,18 @@ spec:
       - name: OVH_APPLICATION_KEY
         valueFrom:
           secretKeyRef:
-            name: ovh-external-dns-creds
-            key: application-key
+            name: external-dns-secret
+            key: OVH_APPLICATION_KEY
       - name: OVH_APPLICATION_SECRET
         valueFrom:
           secretKeyRef:
-            name: ovh-external-dns-creds
-            key: application-secret
+            name: external-dns-secret
+            key: OVH_APPLICATION_SECRET
       - name: OVH_CONSUMER_KEY
         valueFrom:
           secretKeyRef:
-            name: ovh-external-dns-creds
-            key: consummer-key
+            name: external-dns-secret
+            key: OVH_CONSUMER_KEY
     extraArgs:
       - --annotation-filter=external-dns.home.arpa/enabled in (true)
     policy: sync

kubernetes/apps/networking/external-dns/app/kustomization.yaml

@@ -4,5 +4,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: networking
 resources:
-  - ./secret.sops.yaml
+  - ./externalsecret.yaml
   - ./helmrelease.yaml

kubernetes/apps/networking/external-dns/app/secret.sops.yaml

@@ -1,31 +0,0 @@
-# yamllint disable
-apiVersion: v1
-kind: Secret
-type: Opaque
-metadata:
-    name: ovh-external-dns-creds
-    namespace: networking
-stringData:
-    application-key: ENC[AES256_GCM,data:eM+c4o7krcCr38iYl+V9aw==,iv:bWvn6Du2AYczidEiYcCiiXiCWQoNTM55+pEqEDT5gVg=,tag:XAtpQsK7J7mQWs47qqAt/Q==,type:str]
-    application-secret: ENC[AES256_GCM,data:dsAI3MXIpqC5FQZojzchOUfJPARBYOOUbnmY042w9DQ=,iv:gLh0ySZfm1akVIcnN/LMuuI7GZrBBq/X6mnQd1j9BeA=,tag:wIKWVoDMRfn68Ot56HFPGA==,type:str]
-    consummer-key: ENC[AES256_GCM,data:5RZrrLBGOhmnPLyRBy83SSAYz67h9zfIwx2cEUSxFAs=,iv:x3rMt3obLjR12PSiuzFb4qPirnMXpxojFZ9sTDp2pis=,tag:2ve3wWb2bHQQUA8m7+gyKQ==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1hhurqwmfvl9m3vh3hk8urulfzcdsrep2ax2neazqt435yhpamu3qj20asg
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByazlaTU9oZFR2Y2U1blg0
-            VXdUK3BzL1hsM3RydHQzcE95RklOTUdVWEE4CnNkOGprRVFCNFZjTkpOMnJ0R09T
-            RWhhemdvb243UGlVMHhjWVUzTW03V00KLS0tIDJ3d1NYdkJLaHlvQXBCbFlDZXRp
-            bi8wYjlEM0xGZExSV05HSGlkYjQ2VlUKesUixJpqR2iYx5kNxrbD0kTG1siHVKqq
-            sh8UblAqd1av0/3Qpj9dMF8awR8Q80dElcEwXT90Ks/S7p/uEA358g==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-12-27T00:19:30Z"
-    mac: ENC[AES256_GCM,data:hbC1/+QtH1O0w7cCshPm5b/3pljWMR4Q1bhqoepIJEeLa82N3YqHZ4PcEKPHaJKRpzBN/+OcoMMAC29xBzp+yaS3WZLkh7cz2rYC4+16fjZCjwChZXJOtyE8CrUlsXUj7OvL23RnscCE/0fuIL4uRWqLKokLkbdc6X+sVRlY4l0=,iv:JZZIrTeY0L4jy4cUZfmcm3+ZCjxgn27qIdJf5pVrZkM=,tag:DM+XGSXt/rD/5jTW6LaWTQ==,type:str]
-    pgp: []
-    encrypted_regex: ^(data|stringData)$
-    version: 3.7.3

kubernetes/apps/networking/external-dns/ks.yaml

@@ -13,6 +13,8 @@ spec:
   sourceRef:
     kind: GitRepository
     name: home-ops-kubernetes
+  dependsOn:
+    - name: cluster-apps-external-secrets-stores
   healthChecks:
     - apiVersion: helm.toolkit.fluxcd.io/v2beta1
       kind: HelmRelease