feat: Provision ExternalSecrets

k8s-peterg/external-secrets-operator/kustomization.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml
+  - secretstore.yaml
+
+helmCharts:
+  - name: external-secrets
+    repo: https://charts.external-secrets.io
+    namespace: external-secrets
+    releaseName: external-secrets
+    version: 1.0.0

k8s-peterg/external-secrets-operator/namespace.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: external-secrets

k8s-peterg/external-secrets-operator/secretstore.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: external-secrets.io/v1
+kind: ClusterSecretStore
+metadata:
+  name: 1password-wheatley
+spec:
+  provider:
+    onepasswordSDK:
+      vault: wheatley
+      auth:
+        serviceAccountSecretRef:
+          namespace: external-secrets
+          name: 1password-token-wheatley
+          key: token

k8s-peterg/kustomization.yaml

@@ -4,3 +4,4 @@ kind: Kustomization
 resources:
   - cilium-gatewayapi
   - argocd
+  - external-secrets-operator