(TESTING) (fleet/external-secrets-conf) fake it until you make it

lsst-it · Mar 27, 2024 · 58ba882 · 58ba882
1 parent 313bcc2
commit 58ba882
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 0 deletions.
diff --git a/fleet/lib/external-secrets-conf/fleet.yaml b/fleet/lib/external-secrets-conf/fleet.yaml
@@ -12,6 +12,13 @@ dependsOn:
         bundle: external-secrets
 targetCustomizations:
   # first match is used
+  - name: ci
+    clusterSelector:
+      matchLabels:
+        ci: "true"
+    yaml:
+      overlays:
+        - ci
   - name: ayekan
     clusterName: ayekan
     yaml:

diff --git a/fleet/lib/external-secrets-conf/overlays/ci/clustersecretstore-onepassword.yaml b/fleet/lib/external-secrets-conf/overlays/ci/clustersecretstore-onepassword.yaml
@@ -0,0 +1,16 @@
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ClusterSecretStore
+metadata:
+  name: onepassword
+  namespace: external-secrets
+spec:
+  provider:
+    fake:
+      data:
+        - key: it-dns-dev (aws)
+          #property: username
+          value: XXXusername
+        - key: it-dns-dev (aws)
+          #property: password
+          value: XXXpassword