Extend secrets helm chart

This commit is contained in:
Amarpreet Minhas 2023-07-10 20:46:00 +00:00
parent e66e15aecb
commit eb1bd5f704
7 changed files with 28 additions and 19 deletions

View file

@ -6,6 +6,8 @@ serviceAccountName: miniflux
externalSecrets: externalSecrets:
secretStoreName: miniflux secretStoreName: miniflux
vaultRole: miniflux vaultRole: miniflux
secretPaths:
- name: miniflux
secrets: secrets:
- secretKey: miniflux_admin_pw - secretKey: miniflux_admin_pw
key: miniflux key: miniflux
@ -13,6 +15,7 @@ externalSecrets:
- secretKey: miniflux_db_url - secretKey: miniflux_db_url
key: miniflux key: miniflux
property: miniflux_db_url property: miniflux_db_url
istio: istio:
commonName: rss.minhas.io commonName: rss.minhas.io
ingressSelector: ingressgateway ingressSelector: ingressgateway

View file

@ -6,6 +6,8 @@ serviceAccountName: default
externalSecrets: externalSecrets:
secretStoreName: default secretStoreName: default
vaultRole: external-dns vaultRole: external-dns
secretPaths:
- name: pihole
secrets: secrets:
- secretKey: pihole-password - secretKey: pihole-password
key: external-dns key: external-dns

View file

@ -59,18 +59,19 @@ spec:
secretRef: secretRef:
name: "serviceaccounttoken" name: "serviceaccounttoken"
... ...
{{- range .Values.externalSecrets.secretPaths }}
--- ---
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: {{ .Values.name }} name: {{ .name }}
namespace: {{ .Values.namespace }} namespace: {{ $.Values.namespace }}
spec: spec:
secretStoreRef: secretStoreRef:
name: {{ .Values.externalSecrets.secretStoreName }} name: {{ $.Values.externalSecrets.secretStoreName }}
kind: SecretStore kind: SecretStore
data: data:
{{- range .Values.externalSecrets.secrets }} {{- range .secrets }}
- secretKey: {{ .secretKey }} - secretKey: {{ .secretKey }}
remoteRef: remoteRef:
conversionStrategy: Default conversionStrategy: Default
@ -79,4 +80,5 @@ spec:
property: {{ .property }} property: {{ .property }}
{{- end }} {{- end }}
... ...
{{- end }}
{{ end }} {{ end }}

View file

@ -5,6 +5,8 @@ serviceAccountName: vault-config-operator
externalSecrets: externalSecrets:
secretStoreName: vault-config-operator secretStoreName: vault-config-operator
vaultRole: vault-config-operator vaultRole: vault-config-operator
secretPaths:
- name: vault-config-operator
secrets: secrets:
- secretKey: ca.crt - secretKey: ca.crt
key: vault-config-operator key: vault-config-operator