kubernetes/argocd
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

enable

Browse Source
This commit is contained in:
Melvin
2026-01-22 20:53:53 +01:00
parent cb8b05ddc1
commit 74de187ee7
8 changed files with 319 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

64
helm/cert-manager-webhook-ovh/ops/templates/externalsecret-ovh-credentials.yaml Normal file
View File

@@ -0,0 +1,64 @@
{{- if .Values.externalSecret.enabled }}
{{- if and .Values.externalSecret.vault.server .Values.externalSecret.remoteRef.applicationKey .Values.externalSecret.remoteRef.applicationSecret .Values.externalSecret.remoteRef.consumerKey }}
---
# ExternalSecret pour cert-manager-webhook-ovh-ops
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: {{ .Values.externalSecret.secretName | default "cert-manager-webhook-ovh" }}
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: cert-manager-webhook-ovh
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
spec:
refreshInterval: {{ .Values.externalSecret.refreshInterval | default "1h" }}
secretStoreRef:
name: {{ .Values.externalSecret.vault.secretStoreName | default "vault-backend" }}
kind: ClusterSecretStore
target:
name: {{ .Values.externalSecret.secretName | default "cert-manager-webhook-ovh" }}
creationPolicy: Owner
data:
- secretKey: application-key
remoteRef:
key: {{ .Values.externalSecret.remoteRef.applicationKey }}
- secretKey: application-secret
remoteRef:
key: {{ .Values.externalSecret.remoteRef.applicationSecret }}
- secretKey: consumer-key
remoteRef:
key: {{ .Values.externalSecret.remoteRef.consumerKey }}
---
# ExternalSecret pour cert-manager-ops (partage du même secret)
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: {{ .Values.externalSecret.secretName | default "cert-manager-webhook-ovh" }}
namespace: {{ .Values.certManager.namespace }}
labels:
app.kubernetes.io/name: cert-manager-webhook-ovh
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
spec:
refreshInterval: {{ .Values.externalSecret.refreshInterval | default "1h" }}
secretStoreRef:
name: {{ .Values.externalSecret.vault.secretStoreName | default "vault-backend" }}
kind: ClusterSecretStore
target:
name: {{ .Values.externalSecret.secretName | default "cert-manager-webhook-ovh" }}
creationPolicy: Owner
data:
- secretKey: application-key
remoteRef:
key: {{ .Values.externalSecret.remoteRef.applicationKey }}
- secretKey: application-secret
remoteRef:
key: {{ .Values.externalSecret.remoteRef.applicationSecret }}
- secretKey: consumer-key
remoteRef:
key: {{ .Values.externalSecret.remoteRef.consumerKey }}
{{- else }}
{{- fail "External Secrets est activé mais la configuration est incomplète. Veuillez définir externalSecret.vault.server et tous les remoteRef (applicationKey, applicationSecret, consumerKey)" }}
{{- end }}
{{- end }}