38 lines
970 B
YAML
38 lines
970 B
YAML
|
{{- if and .Values.externalSecrets }}
|
||
|
|
{{- range .Values.externalSecrets }}
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: ExternalSecret
|
||
|
|
metadata:
|
||
|
|
name: {{ include "..fullname" $ }}-{{ .name }}
|
||
|
|
labels:
|
||
|
|
{{- include "..labels" $ | nindent 4 }}
|
||
|
|
spec:
|
||
|
|
refreshInterval: {{ .refreshInterval | default "10h" }}
|
||
|
|
secretStoreRef:
|
||
|
|
{{- if .ref.clusterSecretStore }}
|
||
|
|
kind: ClusterSecretStore
|
||
|
|
name: {{ .ref.clusterSecretStore }}
|
||
|
|
{{- else }}
|
||
|
|
kind: SecretStore
|
||
|
|
name: {{ .ref.secretStore }}
|
||
|
|
namespace: {{ .ref.secretStoreNamespace }}
|
||
|
|
{{- end }}
|
||
|
|
target:
|
||
|
|
name: {{ include "..fullname" $ }}-exts-{{ .name }}
|
||
|
|
template:
|
||
|
|
{{- if eq .type "docker"}}
|
||
|
|
type: kubernetes.io/dockerconfigjson
|
||
|
|
{{- end }}
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
app.kubernetes.io/managed-by: External-Secrets
|
||
|
|
data:
|
||
|
|
{{- range $v := .items }}
|
||
|
|
- secretKey: {{ $v.target }}
|
||
|
|
remoteRef:
|
||
|
|
key: {{ $v.source }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|