Will Anderson
e18d953ff9
Add MARKETPLACE_DB_URL/USER to ConfigMap and MARKETPLACE_DB_PASSWORD ExternalSecret (sourced from secret/legion-db in Vault). Remove the SQLite subPath volume mount and fix-data-ownership initContainer from the blue deployment — marketplace storage is now in Postgres.
63 lines
1.8 KiB
YAML
63 lines
1.8 KiB
YAML
apiVersion: external-secrets.io/v1beta1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: neuron-prod-secrets
|
|
namespace: neuron-prod
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
name: vault
|
|
kind: ClusterSecretStore
|
|
target:
|
|
name: neuron-prod-secrets
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: NEURON_API_KEY
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/prod
|
|
property: api_key
|
|
- secretKey: NEURON_WEBHOOK_SECRET
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/prod
|
|
property: gitea_webhook_secret
|
|
- secretKey: NEURON_LICENSE_ADMIN_TOKEN
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/license
|
|
property: admin_token
|
|
- secretKey: UNKEY_ROOT_KEY
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/unkey
|
|
property: root_key
|
|
- secretKey: UNKEY_API_ID
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/unkey
|
|
property: api_id
|
|
- secretKey: NEURON_R2_ENDPOINT
|
|
remoteRef:
|
|
key: secret/data/r2
|
|
property: endpoint
|
|
- secretKey: NEURON_R2_ACCESS_KEY
|
|
remoteRef:
|
|
key: secret/data/r2
|
|
property: access_key_id
|
|
- secretKey: NEURON_R2_SECRET_KEY
|
|
remoteRef:
|
|
key: secret/data/r2
|
|
property: secret_access_key
|
|
- secretKey: NEURON_R2_BUCKET
|
|
remoteRef:
|
|
key: secret/data/r2
|
|
property: neuron_bucket
|
|
- secretKey: STRIPE_SECRET_KEY
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/marketing
|
|
property: stripe_secret_key
|
|
- secretKey: STRIPE_WEBHOOK_SECRET
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/marketing
|
|
property: stripe_marketplace_webhook_secret
|
|
- secretKey: MARKETPLACE_DB_PASSWORD
|
|
remoteRef:
|
|
key: secret/data/legion-db
|
|
property: postgres_password
|