31 lines
851 B
YAML
31 lines
851 B
YAML
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: authelia-secret
|
|
namespace: authelia
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
name: vault-backend
|
|
kind: ClusterSecretStore
|
|
target:
|
|
name: authelia-secrets
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE
|
|
remoteRef:
|
|
key: secret/authelia
|
|
property: resetPasswordSecret
|
|
- secretKey: AUTHELIA_SESSION_SECRET_FILE
|
|
remoteRef:
|
|
key: secret/authelia
|
|
property: sessionEncryptionKey
|
|
- secretKey: AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE
|
|
remoteRef:
|
|
key: secret/authelia
|
|
property: storageEncryptionKey
|
|
- secretKey: AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE
|
|
remoteRef:
|
|
key: secret/authelia
|
|
property: postgresPassword
|