strato-infra/flux/cluster/apps/drone/secret.yaml

42 lines
1.0 KiB
YAML

apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: drone-secrets
namespace: drone
spec:
refreshInterval: "15s"
secretStoreRef:
name: vault
kind: ClusterSecretStore
target:
name: drone-secrets
data:
- secretKey: DRONE_RPC_SECRET
remoteRef:
key: k8s/drone
property: drone-rpc-secret
- secretKey: DRONE_SERVER_HOST
remoteRef:
key: k8s/drone
property: drone-server-host
- secretKey: DRONE_SERVER_PROTO
remoteRef:
key: k8s/drone
property: drone-server-proto
- secretKey: DRONE_GIT_ALWAYS_AUTH
remoteRef:
key: k8s/drone
property: git-always-auth
- secretKey: DRONE_GITEA_CLIENT_ID
remoteRef:
key: k8s/drone
property: gitea-client-id
- secretKey: DRONE_GITEA_CLIENT_SECRET
remoteRef:
key: k8s/drone
property: gitea-client-secret
- secretKey: DRONE_GITEA_SERVER
remoteRef:
key: k8s/drone
property: gitea-server