k3s/services/keycloak/keycloak-external-secrets.yaml
2026-06-12 12:20:40 -04:00

57 lines
1.3 KiB
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: keycloak-postgres-credentials
namespace: security
spec:
refreshInterval: "1h"
secretStoreRef:
name: vault-external-secrets-store
kind: ClusterSecretStore
target:
name: keycloak-postgres-credentials
creationPolicy: Owner
data:
- secretKey: POSTGRES_USER
remoteRef:
key: keycloak
property: db-user
- secretKey: POSTGRES_PASSWORD
remoteRef:
key: keycloak
property: db-password
- secretKey: POSTGRES_DB
remoteRef:
key: keycloak
property: db-name
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: keycloak-credentials
namespace: security
spec:
refreshInterval: "1h"
secretStoreRef:
name: vault-external-secrets-store
kind: ClusterSecretStore
target:
name: keycloak-credentials
creationPolicy: Owner
data:
- secretKey: KC_DB_USERNAME
remoteRef:
key: keycloak
property: db-user
- secretKey: KC_DB_PASSWORD
remoteRef:
key: keycloak
property: db-password
- secretKey: KEYCLOAK_ADMIN
remoteRef:
key: keycloak
property: admin-user
- secretKey: KEYCLOAK_ADMIN_PASSWORD
remoteRef:
key: keycloak
property: admin-password