Skip to content

Commit b6421a0

Browse files
committed
add secret
1 parent 95f667f commit b6421a0

File tree

1 file changed

+37
-0
lines changed

1 file changed

+37
-0
lines changed

clusters/cl01tl/services/harbor/templates/external-secret.yaml

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -163,3 +163,40 @@ spec:
163163
key: /digital-ocean/home-infra/postgres-backups
164164
metadataPolicy: None
165165
property: secret
166+
167+
---
168+
apiVersion: external-secrets.io/v1
169+
kind: ExternalSecret
170+
metadata:
171+
name: harbor-postgresql-17-cluster-backup-secret-garage
172+
namespace: {{ .Release.Namespace }}
173+
labels:
174+
app.kubernetes.io/name: harbor-postgresql-17-cluster-backup-secret-garage
175+
app.kubernetes.io/instance: {{ .Release.Name }}
176+
app.kubernetes.io/part-of: {{ .Release.Name }}
177+
spec:
178+
secretStoreRef:
179+
kind: ClusterSecretStore
180+
name: vault
181+
data:
182+
- secretKey: ACCESS_KEY_ID
183+
remoteRef:
184+
conversionStrategy: Default
185+
decodingStrategy: None
186+
key: /garage/home-infra/postgres-backups
187+
metadataPolicy: None
188+
property: ACCESS_KEY_ID
189+
- secretKey: ACCESS_SECRET_KEY
190+
remoteRef:
191+
conversionStrategy: Default
192+
decodingStrategy: None
193+
key: /garage/home-infra/postgres-backups
194+
metadataPolicy: None
195+
property: ACCESS_SECRET_KEY
196+
- secretKey: ACCESS_REGION
197+
remoteRef:
198+
conversionStrategy: Default
199+
decodingStrategy: None
200+
key: /garage/home-infra/postgres-backups
201+
metadataPolicy: None
202+
property: ACCESS_REGION

0 commit comments

Comments
 (0)