chore(eso): Move ExternalSecretsOperator configuration to kustomize-bases

This commit is contained in:
Peter 2025-12-14 14:07:51 +01:00
parent 68e1e422fa
commit 3ae9b9de5a
Signed by: Peter
SSH key fingerprint: SHA256:B5tYaxBExaDm74r1px9iVeZ6F/ZDiyiy9SbBqfZYrvg
6 changed files with 56 additions and 9 deletions

View file

@ -0,0 +1,34 @@
---
apiVersion: external-secrets.io/v1
kind: ClusterExternalSecret
metadata:
name: tls-wildcard-wheatley-in
spec:
externalSecretName: tls-wildcard-wheatley-in
namespaceSelectors:
- matchLabels:
kubernetes.io/metadata.name: kube-system
externalSecretSpec:
secretStoreRef:
name: 1password-wheatley
kind: ClusterSecretStore
target:
name: tls-wildcard-wheatley-in
template:
type: kubernetes.io/tls
data:
tls.crt: "{{ .crt }}"
tls.key: "{{ .key }}"
data:
- secretKey: key
remoteRef:
key: tls-wildcard-wheatley-in/key
metadataPolicy: None
conversionStrategy: Default
decodingStrategy: None
- secretKey: crt
remoteRef:
key: tls-wildcard-wheatley-in/crt
metadataPolicy: None
conversionStrategy: Default
decodingStrategy: None