Update external secret files

Signed-off-by: Simon Misencik <[email protected]>
FRINXio · Oct 20, 2023 · c0ee9f7 · c0ee9f7
1 parent 9b61f72
commit c0ee9f7
Show file tree

Hide file tree

Showing 3 changed files with 29 additions and 1 deletion.
diff --git a/charts/frinx-machine/localhost-values.yaml b/charts/frinx-machine/localhost-values.yaml
@@ -0,0 +1,11 @@
+externalsecret:
+  enabled: true
+  secretstorename: development
+  vault: helm-chart-repo
+
+krakend:
+  ingress:
+    enabled: true
+    annotations:
+      kubernetes.io/ingress.class: nginx
+    host: "fm.127.0.0.1.nip.io"
diff --git a/...ne/templates/docker-external-secrets.yaml → ...ne/templates/regcred-external-secret.yaml b/...ne/templates/docker-external-secrets.yaml → ...ne/templates/regcred-external-secret.yaml
@@ -15,6 +15,6 @@ spec:
   data:
   - secretKey: .dockerconfigjson
     remoteRef:
-      key: common/regcred
+      key: regcred
       property: .dockerconfigjson
 {{- end }}{{ end }}
diff --git a/charts/frinx-machine/templates/secretstore.yaml b/charts/frinx-machine/templates/secretstore.yaml
@@ -0,0 +1,17 @@
+{{- if .Values.externalsecret }}{{ if .Values.externalsecret.enabled }}
+apiVersion: external-secrets.io/v1beta1
+kind: SecretStore
+metadata:
+  name: {{ .Values.externalsecret.secretstorename }}
+spec:
+  provider:
+    onepassword:
+      connectHost: http://onepassword-connect:8080
+      vaults:
+        {{ .Values.externalsecret.vault }}: 1
+      auth:
+        secretRef:
+          connectTokenSecretRef:
+            name: onepassword-connect-token
+            key: token
+{{- end }}{{ end }}