Files
platform/argocd-image-updater/manifests/secret.yaml
Mayne0213 5ac46a4b91 FEAT(image-updater): add github-creds ExternalSecret
- Manage GitHub PAT via Vault
- Remove manual secret creation requirement
2026-01-10 01:17:36 +09:00

51 lines
1.2 KiB
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: zot-registry-credentials
namespace: argocd
spec:
refreshInterval: 1h
secretStoreRef:
kind: ClusterSecretStore
name: vault-backend
target:
name: zot-registry-credentials
creationPolicy: Owner
template:
type: kubernetes.io/dockerconfigjson
data:
.dockerconfigjson: |
{"auths":{"zot0213.kro.kr":{"username":"{{ .USERNAME }}","password":"{{ .PASSWORD }}","auth":"{{ printf "%s:%s" .USERNAME .PASSWORD | b64enc }}"}}}
data:
- secretKey: USERNAME
remoteRef:
key: zot
property: USERNAME
- secretKey: PASSWORD
remoteRef:
key: zot
property: PASSWORD
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: github-creds
namespace: argocd
spec:
refreshInterval: 1h
secretStoreRef:
kind: ClusterSecretStore
name: vault-backend
target:
name: github-creds
creationPolicy: Owner
data:
- secretKey: username
remoteRef:
key: github
property: username
- secretKey: password
remoteRef:
key: github
property: password