strato-infra/flux/cluster/apps/drone/secret.yaml

53 lines
1.3 KiB
YAML

apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: drone-secrets
namespace: drone
spec:
refreshInterval: "15s"
secretStoreRef:
name: vault
kind: ClusterSecretStore
target:
name: drone-secrets
data:
- secretKey: DRONE_RPC_SECRET
remoteRef:
key: k8s/drone
property: drone-rpc-secret
- secretKey: DRONE_SERVER_HOST
remoteRef:
key: k8s/drone
property: drone-server-host
- secretKey: DRONE_SERVER_PROTO
remoteRef:
key: k8s/drone
property: drone-server-proto
- secretKey: DRONE_GIT_ALWAYS_AUTH
remoteRef:
key: k8s/drone
property: git-always-auth
- secretKey: DRONE_GITEA_CLIENT_ID
remoteRef:
key: k8s/drone
property: gitea-client-id
- secretKey: DRONE_GITEA_CLIENT_SECRET
remoteRef:
key: k8s/drone
property: gitea-client-secret
- secretKey: DRONE_GITEA_SERVER
remoteRef:
key: k8s/drone
property: gitea-server
- secretKey: DRONE_DATABASE_DRIVER
remoteRef:
key: k8s/drone
property: drone-db-driver
- secretKey: DRONE_DATABASE_DATASOURCE
remoteRef:
key: k8s/drone
property: drone-db-url
- secretKey: DRONE_NAMESPACE_DEFAULT
remoteRef:
key: k8s/drone
property: namespace