From 196ee240097e5c2ace2933dd87e7b45223ee59ff Mon Sep 17 00:00:00 2001
From: gitea-admin <admin@local>
Date: Tue, 19 May 2026 23:24:43 +0000
Subject: [PATCH] fix: add secretStoreRef orion-vault and fix Vault key paths

---
 deployments/pelican/externalsecret-db.yaml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/deployments/pelican/externalsecret-db.yaml b/deployments/pelican/externalsecret-db.yaml
index 914ae5f..277b251 100644
--- a/deployments/pelican/externalsecret-db.yaml
+++ b/deployments/pelican/externalsecret-db.yaml
@@ -5,16 +5,18 @@ metadata:
   namespace: pelican
 spec:
   refreshInterval: 1h
+  secretStoreRef:
+    name: orion-vault
+    kind: ClusterSecretStore
   target:
     name: pelican-panel-db
     creationPolicy: Owner
   data:
     - secretKey: DB_PASSWORD
       remoteRef:
-        key: secret/data/Talos Cluster/pelican/panel/db
+        key: Talos Cluster/pelican/panel/db
         property: DB_PASSWORD
     - secretKey: DB_USER
       remoteRef:
-        key: secret/data/Talos Cluster/pelican/panel/db
+        key: Talos Cluster/pelican/panel/db
         property: DB_USER
-