migrate more secrets to external-secrets

Author: soerenschneider

clusters/svc.dd.soeren.cloud/aether/external-secret-aether.yaml

@@ -0,0 +1,50 @@
+---
+apiVersion: "external-secrets.io/v1beta1"
+kind: "ExternalSecret"
+metadata:
+  name: "aether"
+spec:
+  refreshInterval: "1h"
+  secretStoreRef:
+    name: "vault"
+    kind: "ClusterSecretStore"
+  target:
+    name: "aether"
+    creationPolicy: "Owner"
+  data:
+    - secretKey: "caldav_password"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/aether"
+        property: "caldav_password"
+    - secretKey: "caldav_user"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/aether"
+        property: "caldav_user"
+    - secretKey: "carddav_password"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/aether"
+        property: "carddav_password"
+    - secretKey: "carddav_user"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/aether"
+        property: "carddav_user"
+    - secretKey: "email_from"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/aether"
+        property: "email_from"
+    - secretKey: "email_password"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/aether"
+        property: "email_password"
+    - secretKey: "email_to"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/aether"
+        property: "email_to"
+    - secretKey: "email_username"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/aether"
+        property: "email_username"
+    - secretKey: "weather_apikey"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/aether"
+        property: "weather_apikey"

clusters/svc.dd.soeren.cloud/aether/kustomization.yaml

@@ -5,8 +5,7 @@ namespace: aether
 resources:
   - ../../common/aether
   - namespace.yaml
-  - sops-secret-aether.yaml
-  - sops-secret-aether-taskwarrior.yaml
+  - external-secret-aether.yaml
 patches:
   - target:
       kind: VirtualService

clusters/svc.dd.soeren.cloud/aether/sops-secret-aether-taskwarrior.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: "anki"
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: "vault"
+    kind: "ClusterSecretStore"
+  target:
+    name: "anki"
+    creationPolicy: "Owner"
+  data:
+    - secretKey: "SYNC_USER1"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/anki"
+        property: "SYNC_USER1"

clusters/svc.dd.soeren.cloud/aether/sops-secret-aether.yaml

@@ -6,7 +6,7 @@ resources:
   - "../../../apps/anki"
   - "namespace.yaml"
   - "anki-pv.yaml"
-  - "sops-secret-anki.yaml"
+  - "external-secret-anki.yaml"
 patches:
   - target:
       kind: "VirtualService"