Files
applications/immich/manifests/secret.yaml
Mayne0213 d65596309b REFACTOR(secrets): flatten Vault paths
- Change secret paths from <category>/<app> to <app>
- applications/code-server → code-server
- applications/umami → umami
- databases/postgresql → postgresql
- cluster-infrastructure/authelia → authelia
2026-01-06 16:53:02 +09:00

39 lines
782 B
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: immich-postgres-password
namespace: immich
spec:
refreshInterval: 1h
secretStoreRef:
kind: ClusterSecretStore
name: vault-backend
target:
name: immich-postgres-password
creationPolicy: Owner
data:
- secretKey: password
remoteRef:
key: postgresql
property: PASSWORD
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: immich-oidc
namespace: immich
spec:
refreshInterval: 1h
secretStoreRef:
kind: ClusterSecretStore
name: vault-backend
target:
name: immich-oidc
creationPolicy: Owner
data:
- secretKey: OAUTH_CLIENT_SECRET
remoteRef:
key: authelia
property: IMMICH_CLIENT_SECRET