REFACTOR(repo): move vault/ to manifests/

- Move ExternalSecret files from vault/ to manifests/secret.yaml
- Merge multiple secrets with --- separator (postgresql)
- Update kustomization.yaml references
- Remove vault/ folders

Apps: postgresql, postgresql-dev, pgweb, minio, velero

minio/kustomization.yaml

@@ -1,7 +1,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- vault/minio-root-password.yaml
+- manifests/secret.yaml
 - manifests/storage-class.yaml
 - manifests/persistent-volumes.yaml
 - manifests/console-deployment.yaml

pgweb/kustomization.yaml

@@ -1,4 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- vault/pgweb-secret.yaml
+- manifests/secret.yaml

postgresql-dev/kustomization.yaml

@@ -1,4 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- vault/postgresql-password-dev.yaml
+- manifests/secret.yaml

postgresql/kustomization.yaml

@@ -4,12 +4,7 @@ kind: Kustomization
 namespace: postgresql
 
 resources:
-  # Vault External Secrets
-  - vault/app-user-secret.yaml
-  - vault/superuser-secret.yaml
-  # - vault/backup-s3-secret.yaml  # Disabled - using Velero instead
-
-  # StorageClass with Retain policy
+  - manifests/secret.yaml
   - manifests/storageclass.yaml
 
   # CNPG Cluster

postgresql/manifests/secret.yaml

@@ -1,5 +1,30 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
+metadata:
+  name: postgresql-app-user
+  namespace: postgresql
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault-backend
+  target:
+    name: postgresql-app-user
+    creationPolicy: Owner
+    template:
+      type: kubernetes.io/basic-auth
+      data:
+        username: app
+        password: "{{ .password }}"
+  data:
+    - secretKey: password
+      remoteRef:
+        key: databases/postgresql
+        property: PASSWORD
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
 metadata:
   name: postgresql-superuser
   namespace: postgresql

postgresql/vault/app-user-secret.yaml

@@ -1,23 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: postgresql-app-user
-  namespace: postgresql
-spec:
-  refreshInterval: 1h
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault-backend
-  target:
-    name: postgresql-app-user
-    creationPolicy: Owner
-    template:
-      type: kubernetes.io/basic-auth
-      data:
-        username: app
-        password: "{{ .password }}"
-  data:
-    - secretKey: password
-      remoteRef:
-        key: databases/postgresql
-        property: PASSWORD

velero/kustomization.yaml

@@ -1,4 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- vault/velero-secrets.yaml
+- manifests/secret.yaml