k3s/services/musicseerr/musicseerr-external-secrets.yaml
2026-06-15 16:01:52 -04:00

22 lines
523 B
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: musicseerr-secrets
namespace: default
spec:
refreshInterval: "1h"
secretStoreRef:
name: vault-external-secrets-store
kind: ClusterSecretStore
target:
name: musicseerr-secrets
creationPolicy: Owner
data:
- secretKey: OIDC_CLIENT_ID
remoteRef:
key: oauth2-proxy/musicseerr
property: client-id
- secretKey: OIDC_CLIENT_SECRET
remoteRef:
key: oauth2-proxy/musicseerr
property: client-secret