k3s/services/keycloak/keycloak-external-secrets.yaml

46 lines
991 B
YAML
Raw Normal View History

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: keycloak-db-credentials
namespace: default
spec:
refreshInterval: "1h"
secretStoreRef:
name: vault-external-secrets-store
kind: ClusterSecretStore
target:
name: keycloak-db-secret
creationPolicy: Owner
data:
- secretKey: username
remoteRef:
key: keycloak/database
property: username
- secretKey: password
remoteRef:
key: keycloak/database
property: password
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: keycloak-admin-credentials
namespace: default
spec:
refreshInterval: "1h"
secretStoreRef:
name: vault-external-secrets-store
kind: ClusterSecretStore
target:
name: keycloak-admin-login
creationPolicy: Owner
data:
- secretKey: username
remoteRef:
key: keycloak/admin
property: username
- secretKey: password
remoteRef:
key: keycloak/admin
property: password