Files
storage/velero/manifests/secret.yaml
Mayne0213 38cf6abc0b refactor: update Vault secret paths to new categorized structure
- minio: minio → storage/minio, minio-s3-credentials → storage/minio-s3-credentials
- pgweb: pgweb → storage/pgweb
- postgresql: postgresql → storage/postgresql
- velero: minio → storage/minio, velero → storage/velero
- zot: zot → storage/zot

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-11 22:36:38 +09:00

54 lines
1.2 KiB
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: velero-s3-credentials
namespace: velero
spec:
refreshInterval: 1h
secretStoreRef:
kind: ClusterSecretStore
name: vault-backend
target:
name: velero-s3-credentials
creationPolicy: Owner
template:
type: Opaque
data:
cloud: |
[default]
aws_access_key_id={{ .minioAccessKey }}
aws_secret_access_key="{{ .minioSecretKey }}"
data:
- secretKey: minioAccessKey
remoteRef:
key: storage/minio
property: ROOT_USER
- secretKey: minioSecretKey
remoteRef:
key: storage/minio
property: ROOT_PASSWORD
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: velero-ui-secret
namespace: velero
spec:
refreshInterval: 1h
secretStoreRef:
kind: ClusterSecretStore
name: vault-backend
target:
name: velero-ui-secret
creationPolicy: Owner
data:
- secretKey: username
remoteRef:
key: storage/velero
property: UI_USERNAME
- secretKey: password
remoteRef:
key: storage/velero
property: UI_PASSWORD