47 lines
1.2 KiB
YAML
47 lines
1.2 KiB
YAML
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: dynamic-runner
|
|
namespace: dynamic-runner
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
kind: ClusterSecretStore
|
|
name: openbao
|
|
target:
|
|
creationPolicy: Owner
|
|
name: dynamic-runner
|
|
data:
|
|
- secretKey: nats-password
|
|
remoteRef:
|
|
key: k8s/nats
|
|
property: ci_producer_password
|
|
- secretKey: nats-worker-password
|
|
remoteRef:
|
|
key: k8s/nats
|
|
property: ci_worker_password
|
|
- secretKey: opensandbox-api-key
|
|
remoteRef:
|
|
key: k8s/opensandbox-api
|
|
property: api_key
|
|
- secretKey: webhook-secret
|
|
remoteRef:
|
|
key: k8s/dynamic-runner
|
|
property: webhook_secret
|
|
- secretKey: token
|
|
remoteRef:
|
|
key: k8s/gitea-runner
|
|
property: token
|
|
- secretKey: scheduler-uuid
|
|
remoteRef:
|
|
key: k8s/dynamic-runner
|
|
property: scheduler_uuid
|
|
- secretKey: scheduler-token
|
|
remoteRef:
|
|
key: k8s/dynamic-runner
|
|
property: scheduler_token
|
|
- secretKey: facade-capability-key
|
|
remoteRef:
|
|
key: k8s/dynamic-runner
|
|
property: facade_capability_key
|