70 lines
1.9 KiB
YAML
70 lines
1.9 KiB
YAML
apiVersion: secrets.hashicorp.com/v1beta1
|
|
kind: VaultStaticSecret
|
|
metadata:
|
|
name: identity-postgres-superuser
|
|
spec:
|
|
vaultAuthRef: vault-auth-auth-platform
|
|
mount: secret
|
|
type: kv-v2
|
|
path: identity-postgres/superuser
|
|
refreshAfter: 60s
|
|
destination:
|
|
name: identity-postgres-superuser
|
|
create: true
|
|
overwrite: true
|
|
labels:
|
|
app.kubernetes.io/name: identity-postgres
|
|
app.kubernetes.io/component: database
|
|
app.kubernetes.io/managed-by: vault-secrets-operator
|
|
---
|
|
apiVersion: secrets.hashicorp.com/v1beta1
|
|
kind: VaultStaticSecret
|
|
metadata:
|
|
name: keycloak-db-creds
|
|
spec:
|
|
vaultAuthRef: vault-auth-auth-platform
|
|
mount: secret
|
|
type: kv-v2
|
|
path: keycloak/db
|
|
refreshAfter: 60s
|
|
destination:
|
|
name: keycloak-db
|
|
create: true
|
|
overwrite: true
|
|
labels:
|
|
app.kubernetes.io/name: keycloak
|
|
app.kubernetes.io/component: database
|
|
app.kubernetes.io/managed-by: vault-secrets-operator
|
|
---
|
|
apiVersion: secrets.hashicorp.com/v1beta1
|
|
kind: VaultStaticSecret
|
|
metadata:
|
|
name: auth-server-db-creds
|
|
spec:
|
|
vaultAuthRef: vault-auth-auth-platform
|
|
mount: secret
|
|
type: kv-v2
|
|
path: auth-server/db
|
|
refreshAfter: 60s
|
|
destination:
|
|
name: auth-server-db
|
|
create: true
|
|
overwrite: true
|
|
labels:
|
|
app.kubernetes.io/name: auth-server
|
|
app.kubernetes.io/component: database
|
|
app.kubernetes.io/managed-by: vault-secrets-operator
|
|
transformation:
|
|
templates:
|
|
SPRING_DATASOURCE_USERNAME:
|
|
text: '{{ index .Secrets "SPRING_DATASOURCE_USERNAME" }}'
|
|
SPRING_DATASOURCE_PASSWORD:
|
|
text: '{{ index .Secrets "SPRING_DATASOURCE_PASSWORD" }}'
|
|
APP_DATASOURCE_USERNAME:
|
|
text: '{{ index .Secrets "SPRING_DATASOURCE_USERNAME" }}'
|
|
APP_DATASOURCE_PASSWORD:
|
|
text: '{{ index .Secrets "SPRING_DATASOURCE_PASSWORD" }}'
|
|
rolloutRestartTargets:
|
|
- kind: Deployment
|
|
name: auth-server
|