Add Docuseal e-signature service at sign.neuralplatform.ai

- k8s manifests: Deployment, Service, PVC, Ingress, ExternalSecret - Argo CD app watching servers/legion/k8s/docuseal - CF tunnel ingress rule for sign.neuralplatform.ai - Vault secret at secret/docuseal (secret_key_base seeded)
2026-04-21 14:26:01 -05:00
parent 3b3811942c
commit d40fb8c3f1
6 changed files with 145 additions and 0 deletions
@@ -0,0 +1,18 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: docuseal-secrets
+  namespace: docuseal
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: vault
+    kind: ClusterSecretStore
+  target:
+    name: docuseal-secrets
+    creationPolicy: Owner
+  data:
+    - secretKey: secret_key_base
+      remoteRef:
+        key: secret/data/docuseal
+        property: secret_key_base