Files
storage/postgresql/vault/superuser-secret.yaml
Mayne0213 bc3b9cb628 FEAT(vault): integrate Vault secrets
- Add ExternalSecret configuration
- Enable Vault integration for secrets
2026-01-05 00:39:12 +09:00

24 lines
523 B
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: postgresql-superuser
namespace: postgresql
spec:
refreshInterval: 1h
secretStoreRef:
kind: ClusterSecretStore
name: vault-backend
target:
name: postgresql-superuser
creationPolicy: Owner
template:
type: kubernetes.io/basic-auth
data:
username: postgres
password: "{{ .password }}"
data:
- secretKey: password
remoteRef:
key: databases/postgresql
property: PASSWORD