k3s/retired-services/navigation/navigation-external-secrets.yaml

27 lines
606 B
YAML
Raw Normal View History

2026-06-28 10:59:26 -04:00
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: navigation-secrets
namespace: default
spec:
refreshInterval: "1h"
secretStoreRef:
name: vault-external-secrets-store
kind: ClusterSecretStore
target:
name: navigation-secrets
creationPolicy: Owner
data:
- secretKey: OIDC_CLIENT_ID
remoteRef:
key: navigation
property: client-id
- secretKey: OIDC_CLIENT_SECRET
remoteRef:
key: navigation
property: client-secret
- secretKey: OAUTH2_PROXY_COOKIE_SECRET
remoteRef:
key: navigation
property: cookie-secret