From 47e0aae64c96a0feb450268ebfeaaa96c4225c29 Mon Sep 17 00:00:00 2001
From: Chris Soyars <ctsoyars@gmail.com>
Date: Sun, 31 Dec 2023 16:33:59 -0800
Subject: [PATCH] chore(sonarr): pull api key from secrets

---
 .../download/sonarr/app/externalsecret.yaml   | 19 +++++++++++++++++++
 .../apps/download/sonarr/app/helmrelease.yaml |  3 +++
 .../download/sonarr/app/kustomization.yaml    |  1 +
 3 files changed, 23 insertions(+)
 create mode 100644 kubernetes/apps/download/sonarr/app/externalsecret.yaml

diff --git a/kubernetes/apps/download/sonarr/app/externalsecret.yaml b/kubernetes/apps/download/sonarr/app/externalsecret.yaml
new file mode 100644
index 00000000..38fa557b
--- /dev/null
+++ b/kubernetes/apps/download/sonarr/app/externalsecret.yaml
@@ -0,0 +1,19 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: sonarr
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-connect
+  target:
+    name: sonarr
+    template:
+      engineVersion: v2
+      data:
+        SONARR__API_KEY: "{{ .SONARR_API_KEY }}"
+  dataFrom:
+    - extract:
+        key: sonarr
diff --git a/kubernetes/apps/download/sonarr/app/helmrelease.yaml b/kubernetes/apps/download/sonarr/app/helmrelease.yaml
index ea6d803a..711572a2 100644
--- a/kubernetes/apps/download/sonarr/app/helmrelease.yaml
+++ b/kubernetes/apps/download/sonarr/app/helmrelease.yaml
@@ -42,6 +42,9 @@ spec:
               SONARR__AUTHENTICATION_REQUIRED: DisabledForLocalAddresses
               SONARR__APPLICATION_URL: "https://sonarr.${SECRET_DOMAIN}"
               SONARR__LOG_LEVEL: info
+            envFrom:
+              - secretRef:
+                  name: sonarr
             resources:
               requests:
                 cpu: 20m
diff --git a/kubernetes/apps/download/sonarr/app/kustomization.yaml b/kubernetes/apps/download/sonarr/app/kustomization.yaml
index 077527c8..3cf36d9e 100644
--- a/kubernetes/apps/download/sonarr/app/kustomization.yaml
+++ b/kubernetes/apps/download/sonarr/app/kustomization.yaml
@@ -2,5 +2,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - ./externalsecret.yaml
   - ./helmrelease.yaml
   - ../../../../templates/volsync