agent-company
43f5d5ef60
Add flux/external-secrets/ directory containing: - namespace.yaml: external-secrets namespace - helmrepository.yaml: charts.external-secrets.io HelmRepository - helmrelease.yaml: ESO HelmRelease (external-secrets/external-secrets >=0.9.0 <1.0.0) - clustersecretstore.yaml: ClusterSecretStore using Kubernetes provider (ServiceAccount + ClusterRole + ClusterRoleBinding + ClusterSecretStore) - kustomization.yaml: wires all above resources Uncomment and complete ExternalSecret manifests in each API namespace: - flux/zip-enrichment/externalsecret.yaml - flux/holidays/externalsecret.yaml - flux/air-quality/externalsecret.yaml All three ExternalSecrets reference the kubernetes-provider ClusterSecretStore and will auto-sync rapidapi-proxy-secret once ESO is running. Add external-secrets to flux/kustomization.yaml. kustomize build flux/ = PASS Closes leeworks-agents/api-company#61
31 lines
598 B
YAML
31 lines
598 B
YAML
apiVersion: helm.toolkit.fluxcd.io/v2
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: external-secrets
|
|
namespace: external-secrets
|
|
spec:
|
|
interval: 15m
|
|
chart:
|
|
spec:
|
|
chart: external-secrets
|
|
version: ">=0.9.0 <1.0.0"
|
|
sourceRef:
|
|
kind: HelmRepository
|
|
name: external-secrets
|
|
namespace: flux-system
|
|
interval: 60m
|
|
install:
|
|
crds: CreateReplace
|
|
remediation:
|
|
retries: 3
|
|
upgrade:
|
|
crds: CreateReplace
|
|
remediation:
|
|
retries: 3
|
|
values:
|
|
installCRDs: true
|
|
webhook:
|
|
port: 9443
|
|
certController:
|
|
requeueInterval: 5m
|