Files
storage/velero/manifests/secret.yaml
Mayne0213 9c0fddb0ef REFACTOR(secrets): flatten Vault paths
- Change secret paths from <category>/<app> to <app>
- databases/postgresql → postgresql
- databases/minio → minio
- databases/pgweb → pgweb
- cluster-infrastructure/velero → velero
2026-01-06 16:52:54 +09:00

54 lines
1.1 KiB
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: velero-s3-credentials
namespace: velero
spec:
refreshInterval: 1h
secretStoreRef:
kind: ClusterSecretStore
name: vault-backend
target:
name: velero-s3-credentials
creationPolicy: Owner
template:
type: Opaque
data:
cloud: |
[default]
aws_access_key_id={{ .minioAccessKey }}
aws_secret_access_key="{{ .minioSecretKey }}"
data:
- secretKey: minioAccessKey
remoteRef:
key: minio
property: ROOT_USER
- secretKey: minioSecretKey
remoteRef:
key: minio
property: ROOT_PASSWORD
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: velero-ui-secret
namespace: velero
spec:
refreshInterval: 1h
secretStoreRef:
kind: ClusterSecretStore
name: vault-backend
target:
name: velero-ui-secret
creationPolicy: Owner
data:
- secretKey: username
remoteRef:
key: velero
property: UI_USERNAME
- secretKey: password
remoteRef:
key: velero
property: UI_PASSWORD