Will Anderson
c847b22014
License service references NEURON_R2_ENDPOINT/ACCESS_KEY/SECRET_KEY but these were missing from neuron-prod-secrets. Pull from secret/r2 in Vault.
51 lines
1.4 KiB
YAML
51 lines
1.4 KiB
YAML
apiVersion: external-secrets.io/v1beta1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: neuron-prod-secrets
|
|
namespace: neuron-prod
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
name: vault
|
|
kind: ClusterSecretStore
|
|
target:
|
|
name: neuron-prod-secrets
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: NEURON_API_KEY
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/prod
|
|
property: api_key
|
|
- secretKey: NEURON_WEBHOOK_SECRET
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/prod
|
|
property: gitea_webhook_secret
|
|
- secretKey: NEURON_LICENSE_ADMIN_TOKEN
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/license
|
|
property: admin_token
|
|
- secretKey: UNKEY_ROOT_KEY
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/unkey
|
|
property: root_key
|
|
- secretKey: UNKEY_API_ID
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/unkey
|
|
property: api_id
|
|
- secretKey: NEURON_R2_ENDPOINT
|
|
remoteRef:
|
|
key: secret/data/r2
|
|
property: endpoint
|
|
- secretKey: NEURON_R2_ACCESS_KEY
|
|
remoteRef:
|
|
key: secret/data/r2
|
|
property: access_key_id
|
|
- secretKey: NEURON_R2_SECRET_KEY
|
|
remoteRef:
|
|
key: secret/data/r2
|
|
property: secret_access_key
|
|
- secretKey: NEURON_R2_BUCKET
|
|
remoteRef:
|
|
key: secret/data/r2
|
|
property: neuron_bucket
|