35 lines
936 B
YAML
35 lines
936 B
YAML
{{- if and .Values.secrets .Values.secrets.external }}
|
|
{{- range .Values.secrets.external }}
|
|
---
|
|
apiVersion: external-secrets.io/v1beta1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: {{ include "..fullname" $ }}-ext-{{ .name }}
|
|
labels:
|
|
{{- include "..labels" $ | nindent 8 }}
|
|
spec:
|
|
refreshInterval: {{ .refreshInterval | default "10h" }}
|
|
secretStoreRef:
|
|
{{- if .ref.clusterSecretStore }}
|
|
kind: ClusterSecretStore
|
|
name: {{ .ref.clusterSecretStore }}
|
|
{{- else }}
|
|
kind: SecretStore
|
|
name: {{ .ref.secretStore }}
|
|
namespace: {{ .ref.secretStoreNamespace }}
|
|
{{- end }}
|
|
target:
|
|
name: {{ include "..fullname" $ }}-exts-{{ .name }}
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/managed-by: External-Secrets
|
|
data:
|
|
{{- range $v := .items }}
|
|
- secretKey: {{ $v.target }}
|
|
remoteRef:
|
|
key: {{ $v.source }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|