kubernetes/k8s-peterg/argo-workflows/secrets.yaml

33 lines
870 B
YAML

---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: argo-workflows-sso
namespace: argo-workflows
spec:
secretStoreRef:
name: vault-wheatley
kind: ClusterSecretStore
target:
name: argo-workflows-sso
template:
metadata:
labels:
app.kubernetes.io/part-of: argo-workflows
data:
- secretKey: client-id
remoteRef:
key: secrets/managed/argo-workflows/authentik-sso
property: client-id
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore
- secretKey: client-secret
remoteRef:
key: secrets/managed/argo-workflows/authentik-sso
property: client-secret
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
nullBytePolicy: Ignore