mirror of
https://github.com/auricom/home-cluster.git
synced 2025-09-30 23:45:25 +02:00
35 lines
1.0 KiB
YAML
35 lines
1.0 KiB
YAML
---
|
|
# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/external-secrets.io/externalsecret_v1beta1.json
|
|
apiVersion: external-secrets.io/v1beta1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: tandoor
|
|
namespace: default
|
|
spec:
|
|
secretStoreRef:
|
|
kind: ClusterSecretStore
|
|
name: onepassword-connect
|
|
target:
|
|
name: tandoor-secret
|
|
creationPolicy: Owner
|
|
template:
|
|
data:
|
|
# App
|
|
SECRET_KEY: "{{ .TANDOOR_SECRET_KEY }}"
|
|
POSTGRES_HOST: &dbHost postgres-rw.default.svc.cluster.local
|
|
POSTGRES_PORT: "5432"
|
|
POSTGRES_DB: &dbName tandoor
|
|
POSTGRES_USER: &dbUser "{{ .TANDOOR_POSTGRES_USER }}"
|
|
POSTGRES_PASSWORD: &dbPass "{{ .TANDOOR_POSTGRES_PASS }}"
|
|
# Postgres Init
|
|
INIT_POSTGRES_DBNAME: *dbName
|
|
INIT_POSTGRES_HOST: *dbHost
|
|
INIT_POSTGRES_USER: *dbUser
|
|
INIT_POSTGRES_PASS: *dbPass
|
|
INIT_POSTGRES_SUPER_PASS: "{{ .POSTGRES_SUPER_PASS }}"
|
|
dataFrom:
|
|
- extract:
|
|
key: cloudnative-pg
|
|
- extract:
|
|
key: tandoor
|