Compare commits

..

2 Commits

Author SHA1 Message Date
gitea-admin 782c787430 Merge pull request 'fix: update n8n ExternalSecret to v1' (#110) from orion/auto/fix-update-n8n-externalsecret-to-v1-1780145710378 into main
Reviewed-on: #110
2026-05-30 15:53:20 +00:00
gitea-admin 52388ec19f fix: update n8n ExternalSecret to v1
Validate Manifests / validate (pull_request) Failing after 1s
2026-05-30 12:55:10 +00:00
5 changed files with 25 additions and 98 deletions
+25 -5
View File
@@ -1,4 +1,4 @@
apiVersion: external-secrets.io/v1beta1
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: n8n-secret
@@ -6,13 +6,33 @@ metadata:
spec:
refreshInterval: 1h
secretStoreRef:
name: vault
name: orion-vault
kind: ClusterSecretStore
target:
name: n8n-secret
creationPolicy: Owner
data:
- secretKey: N8N_ENCRYPTION_KEY
- secretKey: N8N_SECRET_KEY
remoteRef:
key: secret/data/Talos Cluster/apps/n8n
property: N8N_ENCRYPTION_KEY
key: apps/n8n
property: N8N_SECRET_KEY
- secretKey: DB_HOST
remoteRef:
key: apps/n8n
property: DB_HOST
- secretKey: DB_PORT
remoteRef:
key: apps/n8n
property: DB_PORT
- secretKey: DB_NAME
remoteRef:
key: apps/n8n
property: DB_NAME
- secretKey: DB_USER
remoteRef:
key: apps/n8n
property: DB_USER
- secretKey: DB_PASSWORD
remoteRef:
key: apps/n8n
property: DB_PASSWORD
-36
View File
@@ -1,36 +0,0 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: tailscale-operator
namespace: tailscale
labels:
app: tailscale-operator
spec:
replicas: 1
selector:
matchLabels:
app: tailscale-operator
template:
metadata:
labels:
app: tailscale-operator
spec:
serviceAccountName: tailscale-operator
containers:
- name: tailscale-operator
image: ghcr.io/tailscale/tailscale-operator:v1.78.0
ports:
- containerPort: 8080
env:
- name: TS_AUTH_KEY
valueFrom:
secretKeyRef:
name: tailscale-auth
key: TS_AUTH_KEY
resources:
requests:
cpu: 100m
memory: 128Mi
limits:
cpu: 500m
memory: 512Mi
-18
View File
@@ -1,18 +0,0 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: tailscale-auth
namespace: tailscale
spec:
refreshInterval: 1h
secretStoreRef:
name: orion-vault
kind: ClusterSecretStore
target:
name: tailscale-auth
creationPolicy: Owner
data:
- secretKey: TS_AUTH_KEY
remoteRef:
key: secret/tailscale
property: TS_AUTH_KEY
-6
View File
@@ -1,6 +0,0 @@
apiVersion: v1
kind: Namespace
metadata:
name: tailscale
labels:
app: tailscale
-33
View File
@@ -1,33 +0,0 @@
apiVersion: v1
kind: ServiceAccount
metadata:
name: tailscale-operator
namespace: tailscale
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: tailscale-operator
rules:
- apiGroups: [""]
resources: ["pods", "services", "secrets", "configmaps", "nodes"]
verbs: ["get", "list", "watch"]
- apiGroups: ["networking.k8s.io"]
resources: ["ingresses"]
verbs: ["get", "list", "watch", "update"]
- apiGroups: ["tailscale.com"]
resources: ["*"]
verbs: ["*"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: tailscale-operator
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: tailscale-operator
subjects:
- kind: ServiceAccount
name: tailscale-operator
namespace: tailscale