From 667bdf52c49b20c2f2d701dba4a9a0d4b037a5bf Mon Sep 17 00:00:00 2001
From: gitea-admin <admin@local>
Date: Tue, 19 May 2026 23:24:42 +0000
Subject: [PATCH] fix: add secretStoreRef orion-vault and fix Vault key paths

---
 deployments/pelican/externalsecret-app.yaml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/deployments/pelican/externalsecret-app.yaml b/deployments/pelican/externalsecret-app.yaml
index 3c02fd5..deb786f 100644
--- a/deployments/pelican/externalsecret-app.yaml
+++ b/deployments/pelican/externalsecret-app.yaml
@@ -5,20 +5,22 @@ metadata:
   namespace: pelican
 spec:
   refreshInterval: 1h
+  secretStoreRef:
+    name: orion-vault
+    kind: ClusterSecretStore
   target:
     name: pelican-panel-app
     creationPolicy: Owner
   data:
     - secretKey: APP_KEY
       remoteRef:
-        key: secret/data/Talos Cluster/pelican/panel/app
+        key: Talos Cluster/pelican/panel/app
         property: APP_KEY
     - secretKey: SESSION_SECURE
       remoteRef:
-        key: secret/data/Talos Cluster/pelican/panel/app
+        key: Talos Cluster/pelican/panel/app
         property: SESSION_SECURE
     - secretKey: OAUTH_CLIENT_SECRET
       remoteRef:
-        key: secret/data/Talos Cluster/pelican/panel/app
+        key: Talos Cluster/pelican/panel/app
         property: OAUTH_CLIENT_SECRET
-