K3S-HOME/storage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor: update Vault secret paths to new categorized structure

Browse Source 
- minio: minio → storage/minio, minio-s3-credentials → storage/minio-s3-credentials
- pgweb: pgweb → storage/pgweb
- postgresql: postgresql → storage/postgresql
- velero: minio → storage/minio, velero → storage/velero
- zot: zot → storage/zot

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Mayne0213
2026-01-11 22:36:38 +09:00
parent e9b509d15f
commit 38cf6abc0b
5 changed files with 22 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
minio/manifests/secret.yaml
View File

@@ -14,19 +14,19 @@ spec:
data:
- secretKey: root-user
remoteRef:
key: minio
key: storage/minio
property: ROOT_USER
- secretKey: root-password
remoteRef:
key: minio
key: storage/minio
property: ROOT_PASSWORD
- secretKey: rootUser
remoteRef:
key: minio
key: storage/minio
property: ROOT_USER
- secretKey: rootPassword
remoteRef:
key: minio
key: storage/minio
property: ROOT_PASSWORD
---
apiVersion: external-secrets.io/v1
@@ -49,28 +49,28 @@ spec:
data:
- secretKey: AWS_ACCESS_KEY_ID
remoteRef:
key: minio-s3-credentials
key: storage/minio-s3-credentials
property: AWS_ACCESS_KEY_ID
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
- secretKey: AWS_SECRET_ACCESS_KEY
remoteRef:
key: minio-s3-credentials
key: storage/minio-s3-credentials
property: AWS_SECRET_ACCESS_KEY
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
- secretKey: AWS_REGION
remoteRef:
key: minio-s3-credentials
key: storage/minio-s3-credentials
property: AWS_REGION
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
- secretKey: AWS_S3_ENDPOINT
remoteRef:
key: minio-s3-credentials
key: storage/minio-s3-credentials
property: AWS_S3_ENDPOINT
conversionStrategy: Default
decodingStrategy: None

6
pgweb/manifests/secret.yaml
View File

@@ -14,13 +14,13 @@ spec:
data:
- secretKey: database-url
remoteRef:
key: pgweb
key: storage/pgweb
property: DATABASE_URL
- secretKey: auth-user
remoteRef:
key: pgweb
key: storage/pgweb
property: AUTH_USER
- secretKey: auth-password
remoteRef:
key: pgweb
key: storage/pgweb
property: AUTH_PASSWORD

4
postgresql/manifests/secret.yaml
View File

@@ -19,7 +19,7 @@ spec:
data:
- secretKey: password
remoteRef:
key: postgresql
key: storage/postgresql
property: PASSWORD
---
@@ -44,5 +44,5 @@ spec:
data:
- secretKey: password
remoteRef:
key: postgresql
key: storage/postgresql
property: PASSWORD

8
velero/manifests/secret.yaml
View File

@@ -21,11 +21,11 @@ spec:
data:
- secretKey: minioAccessKey
remoteRef:
key: minio
key: storage/minio
property: ROOT_USER
- secretKey: minioSecretKey
remoteRef:
key: minio
key: storage/minio
property: ROOT_PASSWORD
---
@@ -45,9 +45,9 @@ spec:
data:
- secretKey: username
remoteRef:
key: velero
key: storage/velero
property: UI_USERNAME
- secretKey: password
remoteRef:
key: velero
key: storage/velero
property: UI_PASSWORD

10
zot/manifests/secret.yaml
View File

@@ -14,7 +14,7 @@ spec:
data:
- secretKey: htpasswd
remoteRef:
key: zot
key: storage/zot
property: HTPASSWD
---
apiVersion: external-secrets.io/v1
@@ -41,11 +41,11 @@ spec:
data:
- secretKey: client_id
remoteRef:
key: zot
key: storage/zot
property: OIDC_CLIENT_ID
- secretKey: client_secret
remoteRef:
key: zot
key: storage/zot
property: OIDC_CLIENT_SECRET
---
apiVersion: external-secrets.io/v1
@@ -72,9 +72,9 @@ spec:
data:
- secretKey: hashKey
remoteRef:
key: zot
key: storage/zot
property: SESSION_HASH_KEY
- secretKey: encryptKey
remoteRef:
key: zot
key: storage/zot
property: SESSION_BLOCK_KEY