23 lines
616 B
YAML
23 lines
616 B
YAML
{{- if .Values.vault.enable }}
|
|
---
|
|
apiVersion: external-secrets.io/v1beta1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: '{{ .Chart.Name }}'
|
|
labels:
|
|
app: '{{ .Chart.Name }}'
|
|
spec:
|
|
refreshInterval: '60s'
|
|
secretStoreRef:
|
|
name: '{{ .Values.vault.secretStore }}' # имя SecretStore
|
|
kind: SecretStore
|
|
target:
|
|
name: '{{ .Chart.Name }}-secrets' # имя будущего секрета kubernetes
|
|
data:
|
|
{{- range .Values.vault.secrets }}
|
|
- secretKey: {{ . }}
|
|
remoteRef:
|
|
key: "deck/kubernetes/{{ $.Values.stand }}/{{ $.Chart.Name }}"
|
|
property: {{ . }}
|
|
{{- end }}
|
|
{{- end }} |