k3s/services/ansible/ansible-external-secrets.yaml

27 lines
592 B
YAML
Raw Normal View History

2026-07-21 14:59:02 -04:00
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: ansible-secret
namespace: default
spec:
refreshInterval: "1h"
secretStoreRef:
name: vault-external-secrets-store
kind: ClusterSecretStore
target:
name: ansible-secret
creationPolicy: Owner
data:
- secretKey: SEMAPHORE_ADMIN_PASSWORD
remoteRef:
key: ansible
property: admin-pass
- secretKey: SEMAPHORE_ADMIN_NAME
remoteRef:
key: ansible
property: admin-user
- secretKey: SEMAPHORE_ADMIN_EMAIL
remoteRef:
key: ansible
property: admin-email