k3s/retired-services/matrix-tuwunel/matrix-external-secrets.yaml

46 lines
1 KiB
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: matrix-secrets
namespace: matrix
spec:
refreshInterval: "1h"
secretStoreRef:
name: vault-external-secrets-store
kind: ClusterSecretStore
target:
name: matrix-secrets
creationPolicy: Owner
data:
- secretKey: LIVEKIT_KEY
remoteRef:
key: matrix
property: livekit-key
- secretKey: LIVEKIT_SECRET
remoteRef:
key: matrix
property: livekit-secret
- secretKey: CLIENT_ID
remoteRef:
key: matrix
property: client-id
- secretKey: CLIENT_SECRET
remoteRef:
key: matrix
property: client-secret
- secretKey: POSTGRES_USER
remoteRef:
key: matrix
property: postgres-user
- secretKey: POSTGRES_PASSWORD
remoteRef:
key: matrix
property: postgres-password
- secretKey: SYNAPSE_MACAROON_KEY
remoteRef:
key: matrix
property: synapse-macaroon
- secretKey: SYNAPSE_REGISTRATION_SECRET
remoteRef:
key: matrix
property: synapse-registration