k3s/services/droppedneedle/droppedneedle-external-secret.yaml

23 lines
507 B
YAML
Raw Normal View History

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: droppedneedle-secret
namespace: default
spec:
refreshInterval: "1h"
secretStoreRef:
name: vault-external-secrets-store
kind: ClusterSecretStore
target:
name: droppedneedle-secret
creationPolicy: Owner
data:
- secretKey: SERVICE_USER
remoteRef:
key: dropped-needle
property: service-user
- secretKey: SERVICE_PASS
remoteRef:
key: dropped-needle
property: service-password