k3s/services/windmill/windmill-external-secrets.yaml

30 lines
654 B
YAML
Raw Permalink Normal View History

2026-07-24 18:33:23 -04:00
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: windmill-secret
spec:
refreshInterval: "1h"
secretStoreRef:
name: vault-external-secrets-store
kind: ClusterSecretStore
target:
name: windmill-secret
creationPolicy: Owner
data:
- secretKey: POSTGRES_DB
remoteRef:
key: windmill
property: postgres-db
- secretKey: POSTGRES_USER
remoteRef:
key: windmill
property: postgres-user
- secretKey: POSTGRES_PASSWORD
remoteRef:
key: windmill
property: postgres-password
- secretKey: DATABASE_URL
remoteRef:
key: windmill
property: database-url