chore(sonarr): pull api key from secrets

ctso · Jan 1, 2024 · 47e0aae · 47e0aae
1 parent 4dbe5c8
commit 47e0aae
Show file tree

Hide file tree

Showing 3 changed files with 23 additions and 0 deletions.
diff --git a/kubernetes/apps/download/sonarr/app/externalsecret.yaml b/kubernetes/apps/download/sonarr/app/externalsecret.yaml
@@ -0,0 +1,19 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: sonarr
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-connect
+  target:
+    name: sonarr
+    template:
+      engineVersion: v2
+      data:
+        SONARR__API_KEY: "{{ .SONARR_API_KEY }}"
+  dataFrom:
+    - extract:
+        key: sonarr
diff --git a/kubernetes/apps/download/sonarr/app/helmrelease.yaml b/kubernetes/apps/download/sonarr/app/helmrelease.yaml
@@ -42,6 +42,9 @@ spec:
               SONARR__AUTHENTICATION_REQUIRED: DisabledForLocalAddresses
               SONARR__APPLICATION_URL: "https://sonarr.${SECRET_DOMAIN}"
               SONARR__LOG_LEVEL: info
+            envFrom:
+              - secretRef:
+                  name: sonarr
             resources:
               requests:
                 cpu: 20m

diff --git a/kubernetes/apps/download/sonarr/app/kustomization.yaml b/kubernetes/apps/download/sonarr/app/kustomization.yaml
@@ -2,5 +2,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - ./externalsecret.yaml
   - ./helmrelease.yaml
   - ../../../../templates/volsync