Files
infrastructure/servers/legion/k8s/mudcraft/external-secret-registry.yaml
T

28 lines
837 B
YAML

apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: registry-pull-secret
namespace: mudcraft
spec:
refreshInterval: 1h
secretStoreRef:
name: vault
kind: ClusterSecretStore
target:
name: registry-pull-secret
creationPolicy: Owner
template:
type: kubernetes.io/dockerconfigjson
data:
.dockerconfigjson: |
{"auths":{"registry.neuralplatform.ai":{"username":"{{ .registry_user }}","password":"{{ .registry_docker_token }}","auth":"{{ list .registry_user .registry_docker_token | join ":" | b64enc }}"}}}
data:
- secretKey: registry_user
remoteRef:
key: secret/data/mudcraft
property: registry_user
- secretKey: registry_docker_token
remoteRef:
key: secret/data/mudcraft
property: registry_docker_token