Files
security/external-secrets/manifests/zot-cluster-secret.yaml
Mayne0213 5e161fca8a FEAT(external-secrets): add ClusterExternalSecret for Zot
- Add zot-registry-credentials ClusterExternalSecret
- Auto-create dockerconfigjson in labeled namespaces
- API version v1 (v1beta1 deprecated)
2026-01-07 14:28:58 +09:00

32 lines
885 B
YAML

apiVersion: external-secrets.io/v1
kind: ClusterExternalSecret
metadata:
name: zot-registry-credentials
spec:
externalSecretName: zot-registry-credentials
namespaceSelector:
matchLabels:
zot-registry: enabled
refreshTime: 1h
externalSecretSpec:
secretStoreRef:
kind: ClusterSecretStore
name: vault-backend
target:
name: zot-registry-credentials
creationPolicy: Owner
template:
type: kubernetes.io/dockerconfigjson
data:
.dockerconfigjson: |
{"auths":{"zot0213.kro.kr":{"username":"{{ .USERNAME }}","password":"{{ .PASSWORD }}","auth":"{{ printf "%s:%s" .USERNAME .PASSWORD | b64enc }}"}}}
data:
- secretKey: USERNAME
remoteRef:
key: zot
property: USERNAME
- secretKey: PASSWORD
remoteRef:
key: zot
property: PASSWORD