chore: change CM secrets to external secrets

Jdavid77 · Apr 29, 2024 · f957980 · f957980
1 parent 17ddb4a
commit f957980
Show file tree

Hide file tree

Showing 3 changed files with 22 additions and 29 deletions.
diff --git a/k8s/apps/cert-manager/cert-manager/issuers/cloudflare-secret.yaml b/k8s/apps/cert-manager/cert-manager/issuers/cloudflare-secret.yaml
diff --git a/k8s/apps/cert-manager/cert-manager/issuers/kustomization.yaml b/k8s/apps/cert-manager/cert-manager/issuers/kustomization.yaml
@@ -3,4 +3,5 @@ kind: Kustomization
 resources:
   - lets-encrypt-staging.yaml
   - lets-encrypt-production.yaml
-  - cloudflare-secret.yaml
+  - cloudflare-secret.yaml
+  - secret.yaml
diff --git a/k8s/apps/cert-manager/cert-manager/issuers/secret.yaml b/k8s/apps/cert-manager/cert-manager/issuers/secret.yaml
@@ -0,0 +1,20 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: cloudflare-api-token-secret
+  namespace: network
+spec:
+  refreshInterval: 5m
+
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: akeyless-secret-store
+
+  target:
+    name: cloudflare-api-token-secret
+    creationPolicy: Owner
+
+  data:
+    - secretKey: api-token
+      remoteRef:
+        key: /cert-manager/apiKey