Will Anderson
a6421a5f98
- Add api.neurontechnologies.ai DNS CNAME → CF tunnel - Add tunnel ingress rule for api.neurontechnologies.ai → Traefik - Create rest-ingressroute.yaml: api.neurontechnologies.ai → neuron-rest:8081 - Add STRIPE_SECRET_KEY to neuron-prod ExternalSecret (from marketing-test Vault)
55 lines
1.5 KiB
YAML
55 lines
1.5 KiB
YAML
apiVersion: external-secrets.io/v1beta1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: neuron-prod-secrets
|
|
namespace: neuron-prod
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
name: vault
|
|
kind: ClusterSecretStore
|
|
target:
|
|
name: neuron-prod-secrets
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: NEURON_API_KEY
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/prod
|
|
property: api_key
|
|
- secretKey: NEURON_WEBHOOK_SECRET
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/prod
|
|
property: gitea_webhook_secret
|
|
- secretKey: NEURON_LICENSE_ADMIN_TOKEN
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/license
|
|
property: admin_token
|
|
- secretKey: UNKEY_ROOT_KEY
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/unkey
|
|
property: root_key
|
|
- secretKey: UNKEY_API_ID
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/unkey
|
|
property: api_id
|
|
- secretKey: NEURON_R2_ENDPOINT
|
|
remoteRef:
|
|
key: secret/data/r2
|
|
property: endpoint
|
|
- secretKey: NEURON_R2_ACCESS_KEY
|
|
remoteRef:
|
|
key: secret/data/r2
|
|
property: access_key_id
|
|
- secretKey: NEURON_R2_SECRET_KEY
|
|
remoteRef:
|
|
key: secret/data/r2
|
|
property: secret_access_key
|
|
- secretKey: NEURON_R2_BUCKET
|
|
remoteRef:
|
|
key: secret/data/r2
|
|
property: neuron_bucket
|
|
- secretKey: STRIPE_SECRET_KEY
|
|
remoteRef:
|
|
key: secret/data/neuron-technologies/marketing-test
|
|
property: stripe_secret_key
|