53 lines
1.9 KiB
YAML
53 lines
1.9 KiB
YAML
apiVersion: external-secrets.io/v1beta1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: {{ include "thermo.fullname" . }}-postgres-secret
|
|
labels:
|
|
{{- include "thermo.labels" . | nindent 4 }}
|
|
spec:
|
|
refreshInterval: {{ .Values.externalSecrets.refreshInterval }}
|
|
secretStoreRef:
|
|
name: {{ .Values.externalSecrets.secretStore.name }}
|
|
kind: {{ .Values.externalSecrets.secretStore.kind }}
|
|
target:
|
|
name: {{ include "thermo.fullname" . }}-postgres-secret
|
|
creationPolicy: Owner
|
|
template:
|
|
type: Opaque
|
|
data:
|
|
POSTGRES_DB: {{ .Values.postgres.database | quote }}
|
|
POSTGRES_USER: {{ .Values.postgres.writerUser | quote }}
|
|
POSTGRES_PASSWORD: {{ "{{ .writer_password }}" | quote }}
|
|
GRAFANA_USER: {{ .Values.postgres.readerUser | quote }}
|
|
GRAFANA_PASSWORD: {{ "{{ .reader_password }}" | quote }}
|
|
data:
|
|
- secretKey: writer_password
|
|
remoteRef:
|
|
key: {{ .Values.externalSecrets.writerPasswordKey }}
|
|
- secretKey: reader_password
|
|
remoteRef:
|
|
key: {{ .Values.externalSecrets.readerPasswordKey }}
|
|
---
|
|
apiVersion: external-secrets.io/v1beta1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: {{ include "thermo.fullname" . }}-postgres-redpanda
|
|
labels:
|
|
{{- include "thermo.labels" . | nindent 4 }}
|
|
spec:
|
|
refreshInterval: {{ .Values.externalSecrets.refreshInterval }}
|
|
secretStoreRef:
|
|
name: {{ .Values.externalSecrets.secretStore.name }}
|
|
kind: {{ .Values.externalSecrets.secretStore.kind }}
|
|
target:
|
|
name: {{ include "thermo.fullname" . }}-postgres-redpanda
|
|
creationPolicy: Owner
|
|
template:
|
|
type: Opaque
|
|
data:
|
|
THERMO_POSTGRES_DSN: {{ printf "postgres://%s:%s@%s-postgres.%s.svc.cluster.local:5432/%s?sslmode=disable" .Values.postgres.writerUser "{{ .writer_password }}" (include "thermo.fullname" .) .Release.Namespace .Values.postgres.database | quote }}
|
|
data:
|
|
- secretKey: writer_password
|
|
remoteRef:
|
|
key: {{ .Values.externalSecrets.writerPasswordKey }}
|