gitea-admin/talos-cluster
1
0
Fork 0
Code Issues Pull Requests 15 Actions Packages Projects Releases Wiki Activity

feat: add ClusterSecretStore and ExternalSecret for Tailscale #12

Closed
gitea-admin wants to merge 2 commits from orion/auto/feat-add-clustersecretstore-and-external-1778373287112 into main
pull from: orion/auto/feat-add-clustersecretstore-and-external-1778373287112
merge into: gitea-admin:main
Conversation 0 Commits 2 Files Changed 2
+37
2 changed files with 37 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deployments/tailscale/cluster-secret-store.yaml
+14
View File
@@ -0,0 +1,14 @@
apiVersion: external-secrets.io/v1
kind: ClusterSecretStore
metadata:
name: orion-vault
namespace: vault
spec:
provider:
vault:
server: "http://vault.vault.svc.cluster.local:8200"
path: "secret"
auth:
agentAuth:
path: "kubernetes"
namespace: "vault"
deployments/tailscale/external-secret.yaml
+23
View File
@@ -0,0 +1,23 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: tailscale-auth
namespace: tailscale
labels:
app: tailscale
managed-by: orion
spec:
refreshInterval: "1h"
secretStoreRef:
name: orion-vault
kind: ClusterSecretStore
target:
name: tailscale-auth
creationPolicy: Owner
template:
type: Opaque
data:
- secretKey: TS_AUTH_KEY
remoteRef:
key: secret/data/tailscale
property: TS_AUTH_KEY