chore(eso): Move ExternalSecretsOperator configuration to kustomize-bases

This commit is contained in:
Peter 2025-12-14 14:07:51 +01:00
parent 68e1e422fa
commit 3ae9b9de5a
Signed by: Peter
SSH key fingerprint: SHA256:B5tYaxBExaDm74r1px9iVeZ6F/ZDiyiy9SbBqfZYrvg
6 changed files with 56 additions and 9 deletions

View file

@ -3,13 +3,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- namespace.yaml
- secretstore.yaml
- ../../kustomize-bases/external-secrets-operator
- clustersecrets.yaml
helmCharts:
- name: external-secrets
repo: https://charts.external-secrets.io
namespace: external-secrets
releaseName: external-secrets
version: 1.0.0

View file

@ -0,0 +1,34 @@
---
apiVersion: external-secrets.io/v1
kind: ClusterExternalSecret
metadata:
name: tls-wildcard-wheatley-in
spec:
externalSecretName: tls-wildcard-wheatley-in
namespaceSelectors:
- matchLabels:
kubernetes.io/metadata.name: kube-system
externalSecretSpec:
secretStoreRef:
name: 1password-wheatley
kind: ClusterSecretStore
target:
name: tls-wildcard-wheatley-in
template:
type: kubernetes.io/tls
data:
tls.crt: "{{ .crt }}"
tls.key: "{{ .key }}"
data:
- secretKey: key
remoteRef:
key: tls-wildcard-wheatley-in/key
metadataPolicy: None
conversionStrategy: Default
decodingStrategy: None
- secretKey: crt
remoteRef:
key: tls-wildcard-wheatley-in/crt
metadataPolicy: None
conversionStrategy: Default
decodingStrategy: None

View file

@ -0,0 +1,7 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ../../kustomize-bases/external-secrets-operator
- clustersecrets.yaml

View file

@ -0,0 +1,14 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- namespace.yaml
- secretstore.yaml
helmCharts:
- name: external-secrets
repo: https://charts.external-secrets.io
namespace: external-secrets
releaseName: external-secrets
version: 1.0.0