feat(hasura-engine) add example of how to create an external-secret for chart
This commit is contained in:
parent
eba0746512
commit
3ce1e4ab7d
1 changed files with 32 additions and 0 deletions
32
charts/hasura-engine/extras/externalsecret.yaml
Normal file
32
charts/hasura-engine/extras/externalsecret.yaml
Normal file
|
@ -0,0 +1,32 @@
|
||||||
|
---
|
||||||
|
apiVersion: external-secrets.io/v1beta1
|
||||||
|
kind: ExternalSecret
|
||||||
|
metadata:
|
||||||
|
name: hasura
|
||||||
|
spec:
|
||||||
|
secretStoreRef:
|
||||||
|
kind: ClusterSecretStore
|
||||||
|
name: onepassword-connect
|
||||||
|
target:
|
||||||
|
name: hasura-secret
|
||||||
|
creationPolicy: Owner
|
||||||
|
template:
|
||||||
|
engineVersion: v2
|
||||||
|
data:
|
||||||
|
# Hasura
|
||||||
|
HASURA_GRAPHQL_ADMIN_SECRET: "{{ .HASURA_GRAPHQL_ADMIN_SECRET }}"
|
||||||
|
HASURA_GRAPHQL_DATABASE_URL: |-
|
||||||
|
postgres://hasura:{{ .HASURA_POSTGRES_PASS }}@postgres-rw.databases.svc.cluster.local/hasura
|
||||||
|
# Postgres Init
|
||||||
|
INIT_POSTGRES_DBNAME: hasura
|
||||||
|
INIT_POSTGRES_HOST: postgres-rw.databases.svc.cluster.local
|
||||||
|
INIT_POSTGRES_USER: hasura
|
||||||
|
INIT_POSTGRES_PASS: "{{ .HASURA_POSTGRES_PASS }}"
|
||||||
|
INIT_POSTGRES_SUPER_PASS: "{{ .POSTGRES_SUPER_PASS }}"
|
||||||
|
# Vars
|
||||||
|
PUBLIC_DOMAIN: ${PUBLIC_DOMAIN}
|
||||||
|
dataFrom:
|
||||||
|
- extract:
|
||||||
|
key: hasura
|
||||||
|
- extract:
|
||||||
|
key: postgres
|
Loading…
Reference in a new issue