K3S-HOME/storage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor: update Vault secret paths to new categorized structure

Browse Source 
- minio: minio → storage/minio, minio-s3-credentials → storage/minio-s3-credentials
- pgweb: pgweb → storage/pgweb
- postgresql: postgresql → storage/postgresql
- velero: minio → storage/minio, velero → storage/velero
- zot: zot → storage/zot

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Mayne0213
2026-01-11 22:36:38 +09:00
parent e9b509d15f
commit 38cf6abc0b
5 changed files with 22 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
minio/manifests/secret.yaml
View File

@@ -14,19 +14,19 @@ spec:
data: data:
- secretKey: root-user - secretKey: root-user
remoteRef: remoteRef:
key: minio key: storage/minio
property: ROOT_USER property: ROOT_USER
- secretKey: root-password - secretKey: root-password
remoteRef: remoteRef:
key: minio key: storage/minio
property: ROOT_PASSWORD property: ROOT_PASSWORD
- secretKey: rootUser - secretKey: rootUser
remoteRef: remoteRef:
key: minio key: storage/minio
property: ROOT_USER property: ROOT_USER
- secretKey: rootPassword - secretKey: rootPassword
remoteRef: remoteRef:
key: minio key: storage/minio
property: ROOT_PASSWORD property: ROOT_PASSWORD
--- ---
apiVersion: external-secrets.io/v1 apiVersion: external-secrets.io/v1
@@ -49,28 +49,28 @@ spec:
data: data:
- secretKey: AWS_ACCESS_KEY_ID - secretKey: AWS_ACCESS_KEY_ID
remoteRef: remoteRef:
key: minio-s3-credentials key: storage/minio-s3-credentials
property: AWS_ACCESS_KEY_ID property: AWS_ACCESS_KEY_ID
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
metadataPolicy: None metadataPolicy: None
- secretKey: AWS_SECRET_ACCESS_KEY - secretKey: AWS_SECRET_ACCESS_KEY
remoteRef: remoteRef:
key: minio-s3-credentials key: storage/minio-s3-credentials
property: AWS_SECRET_ACCESS_KEY property: AWS_SECRET_ACCESS_KEY
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
metadataPolicy: None metadataPolicy: None
- secretKey: AWS_REGION - secretKey: AWS_REGION
remoteRef: remoteRef:
key: minio-s3-credentials key: storage/minio-s3-credentials
property: AWS_REGION property: AWS_REGION
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None
metadataPolicy: None metadataPolicy: None
- secretKey: AWS_S3_ENDPOINT - secretKey: AWS_S3_ENDPOINT
remoteRef: remoteRef:
key: minio-s3-credentials key: storage/minio-s3-credentials
property: AWS_S3_ENDPOINT property: AWS_S3_ENDPOINT
conversionStrategy: Default conversionStrategy: Default
decodingStrategy: None decodingStrategy: None

6
pgweb/manifests/secret.yaml
View File

@@ -14,13 +14,13 @@ spec:
data: data:
- secretKey: database-url - secretKey: database-url
remoteRef: remoteRef:
key: pgweb key: storage/pgweb
property: DATABASE_URL property: DATABASE_URL
- secretKey: auth-user - secretKey: auth-user
remoteRef: remoteRef:
key: pgweb key: storage/pgweb
property: AUTH_USER property: AUTH_USER
- secretKey: auth-password - secretKey: auth-password
remoteRef: remoteRef:
key: pgweb key: storage/pgweb
property: AUTH_PASSWORD property: AUTH_PASSWORD

4
postgresql/manifests/secret.yaml
View File

@@ -19,7 +19,7 @@ spec:
data: data:
- secretKey: password - secretKey: password
remoteRef: remoteRef:
key: postgresql key: storage/postgresql
property: PASSWORD property: PASSWORD
--- ---
@@ -44,5 +44,5 @@ spec:
data: data:
- secretKey: password - secretKey: password
remoteRef: remoteRef:
key: postgresql key: storage/postgresql
property: PASSWORD property: PASSWORD

8
velero/manifests/secret.yaml
View File

@@ -21,11 +21,11 @@ spec:
data: data:
- secretKey: minioAccessKey - secretKey: minioAccessKey
remoteRef: remoteRef:
key: minio key: storage/minio
property: ROOT_USER property: ROOT_USER
- secretKey: minioSecretKey - secretKey: minioSecretKey
remoteRef: remoteRef:
key: minio key: storage/minio
property: ROOT_PASSWORD property: ROOT_PASSWORD
--- ---
@@ -45,9 +45,9 @@ spec:
data: data:
- secretKey: username - secretKey: username
remoteRef: remoteRef:
key: velero key: storage/velero
property: UI_USERNAME property: UI_USERNAME
- secretKey: password - secretKey: password
remoteRef: remoteRef:
key: velero key: storage/velero
property: UI_PASSWORD property: UI_PASSWORD

10
zot/manifests/secret.yaml
View File

@@ -14,7 +14,7 @@ spec:
data: data:
- secretKey: htpasswd - secretKey: htpasswd
remoteRef: remoteRef:
key: zot key: storage/zot
property: HTPASSWD property: HTPASSWD
--- ---
apiVersion: external-secrets.io/v1 apiVersion: external-secrets.io/v1
@@ -41,11 +41,11 @@ spec:
data: data:
- secretKey: client_id - secretKey: client_id
remoteRef: remoteRef:
key: zot key: storage/zot
property: OIDC_CLIENT_ID property: OIDC_CLIENT_ID
- secretKey: client_secret - secretKey: client_secret
remoteRef: remoteRef:
key: zot key: storage/zot
property: OIDC_CLIENT_SECRET property: OIDC_CLIENT_SECRET
--- ---
apiVersion: external-secrets.io/v1 apiVersion: external-secrets.io/v1
@@ -72,9 +72,9 @@ spec:
data: data:
- secretKey: hashKey - secretKey: hashKey
remoteRef: remoteRef:
key: zot key: storage/zot
property: SESSION_HASH_KEY property: SESSION_HASH_KEY
- secretKey: encryptKey - secretKey: encryptKey
remoteRef: remoteRef:
key: zot key: storage/zot
property: SESSION_BLOCK_KEY property: SESSION_BLOCK_KEY