2022-03-09 09:48:25 +00:00
|
|
|
apiVersion: external-secrets.io/v1beta1
|
2021-11-07 14:18:40 +00:00
|
|
|
kind: ExternalSecret
|
|
|
|
metadata:
|
2022-11-30 19:06:59 +00:00
|
|
|
name: database-credentials
|
2021-11-07 14:18:40 +00:00
|
|
|
spec:
|
|
|
|
refreshInterval: 1h
|
|
|
|
|
|
|
|
secretStoreRef:
|
|
|
|
kind: SecretStore
|
|
|
|
name: akeyless-secret-store # Must match SecretStore on the cluster
|
|
|
|
|
|
|
|
target:
|
2023-03-07 12:11:02 +00:00
|
|
|
name: database-credentials-json # Name for the secret to be created on the cluster
|
2021-11-07 14:18:40 +00:00
|
|
|
creationPolicy: Owner
|
|
|
|
|
2021-11-15 19:24:03 +00:00
|
|
|
# for json formatted secrets: each key in the json will be used as the secret key in the SECRET k8s target object
|
2021-11-07 14:18:40 +00:00
|
|
|
dataFrom:
|
2022-03-09 09:48:25 +00:00
|
|
|
- extract:
|
2022-11-30 19:06:59 +00:00
|
|
|
key: database-credentials # Full path of the secret on Akeyless
|