shpaq/auricom-home-cluster
1
0
Fork 0
mirror of https://github.com/auricom/home-cluster.git synced 2025-09-17 18:24:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

♻️ migration externalsecrets

Browse Source
This commit is contained in:
auricom
2023-07-08 23:21:34 +02:00
parent 94b5077db7
commit da5c777c93
16 changed files with 93 additions and 138 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
kubernetes/apps/cert-manager/cert-manager/ks.yaml
View File

@@ -33,6 +33,7 @@ metadata:
spec:
dependsOn:
- name: cluster-apps-cert-manager
- name: cluster-apps-external-secrets-stores
path: ./kubernetes/apps/cert-manager/cert-manager/webhook-ovh
prune: true
sourceRef:

18
kubernetes/apps/cert-manager/cert-manager/webhook-ovh/externalsecret.yaml Normal file
View File

@@ -0,0 +1,18 @@
---
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: cert-manager-webhook-ovh
namespace: cert-manager
spec:
secretStoreRef:
kind: ClusterSecretStore
name: onepassword-connect
target:
name: cert-manager-webhook-ovh-secret
creationPolicy: Owner
dataFrom:
- extract:
# applicationKey, applicationSecret, consumerKey
key: cert-manager-webhook-ovh

12
kubernetes/apps/cert-manager/cert-manager/webhook-ovh/helmrelease.yaml
View File

@@ -40,13 +40,13 @@ spec:
ovhEndpointName: ovh-eu
ovhAuthenticationRef:
applicationKeyRef:
name: ovh-credentials
name: cert-manager-webhook-ovh-secret
key: applicationKey
applicationSecretRef:
name: ovh-credentials
name: cert-manager-webhook-ovh-secret
key: applicationSecret
consumerKeyRef:
name: ovh-credentials
name: cert-manager-webhook-ovh-secret
key: consumerKey
- name: letsencrypt-production
create: true
@@ -56,11 +56,11 @@ spec:
ovhEndpointName: ovh-eu
ovhAuthenticationRef:
applicationKeyRef:
name: ovh-credentials
name: cert-manager-webhook-ovh-secret
key: applicationKey
applicationSecretRef:
name: ovh-credentials
name: cert-manager-webhook-ovh-secret
key: applicationSecret
consumerKeyRef:
name: ovh-credentials
name: cert-manager-webhook-ovh-secret
key: consumerKey

2
kubernetes/apps/cert-manager/cert-manager/webhook-ovh/kustomization.yaml
View File

@@ -3,5 +3,5 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ./externalsecret.yaml
- ./helmrelease.yaml
- ./secret.sops.yaml

30
kubernetes/apps/cert-manager/cert-manager/webhook-ovh/secret.sops.yaml
View File

@@ -1,30 +0,0 @@
kind: Secret
apiVersion: v1
metadata:
name: ovh-credentials
namespace: cert-manager
stringData:
applicationKey: ENC[AES256_GCM,data:UYBGsO4gGWA1iPUqVAYnjw==,iv:/rYA+o/EXOLsbU8WUnp53ejYgi+TFb3DJ/fJS6iUjAM=,tag:hEPzYgcefH5iJWS1bF6R5A==,type:str]
applicationSecret: ENC[AES256_GCM,data:QsTdVpgbp/CAqt0mZPRNDINMach/EiM/1+kbgEzxIqE=,iv:/CJVh2tT7wXAdeuxBHN5kM/LidhgGKCTW66hxTcx4QA=,tag:yLw4HpAx7RlZ11LMPMdXtg==,type:str]
consumerKey: ENC[AES256_GCM,data:OmI9kc0tNQWCpM+Bg0oQMdYwhZRsqQDZ87NFpkYFpMo=,iv:7elfo7xvxa57du6IjZRJejdpgIQiSjgoRqhWAtMLzXg=,tag:Zk36lNZ+EcZYAye1W+4gwA==,type:str]
type: Opaque
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age:
- recipient: age1hhurqwmfvl9m3vh3hk8urulfzcdsrep2ax2neazqt435yhpamu3qj20asg
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByMWQvSUhwYnFyMHJXVWxQ
cjllMGlCRnRwdGJZRU9DVGdMUHE5ZUQxUEVjCkJnY3NWeDg5MnZOQjN3RDVtOTN2
c1Z0OUNsSm5IZ0k0UGJXRVlVRnRwQzQKLS0tIEtDRGVyN1gyaU9wM3ZLczRVYnBQ
czlyZ2lrYk1LNktxTkZiNUdFb0xHblEKlGExd13zMg6MofRAz+GT9wKL/sEBI6XD
u+dQAsphIoPpptFY0IeehXTLBV8xK4p1Z1/qu6UgJOnQtb2KGYOOvQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2022-12-26T23:59:54Z"
mac: ENC[AES256_GCM,data:dnguY6zpQRkj3cV2+CzCdIldBTVGUSIMh5bKoRsJ/cYONp9LjpqGZSmuDfFNRVaWU293M+T12criNH7SndGpquw46YJT48S14g9vi6NeRhK6Rl0z2TbNbtm/7uIUkgmHy1aur8IxfdDdzBScIlq0nfjhcTyYz1RYw/K2bKTwvzA=,iv:TZS0p+IPWqEq9trZxs7FGY7kZ83EaijFH1Kw/IElgjg=,tag:AlIFWcQfDMC9h7sm2WI9zQ==,type:str]
pgp: []
encrypted_regex: ^(data|stringData)$
version: 3.7.3