...

Text file src/edge-infra.dev/config/pallets/plank/base/external-secrets.yaml

Documentation: edge-infra.dev/config/pallets/plank/base

     1apiVersion: external-secrets.io/v1beta1
     2kind: ExternalSecret
     3metadata:
     4  name: plank-alloydb-secret
     5spec:
     6  data:
     7  - remoteRef:
     8      key: plank-alloydb-secret
     9    secretKey: DB_PASSWORD
    10  refreshInterval: 10m
    11  secretStoreRef:
    12    name: gcp-provider
    13    kind: ClusterSecretStore
    14  target:
    15    name: plank-creds
    16    creationPolicy: Owner
    17---
    18apiVersion: iam.cnrm.cloud.google.com/v1beta1
    19kind: IAMPolicyMember
    20metadata:
    21  name: essa-plank-alloydb-secret
    22spec:
    23  member: serviceAccount:ext-sec-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com
    24  resourceRef:
    25    apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
    26    kind: SecretManagerSecret
    27    external: projects/${gcp_project_id}/secrets/plank-alloydb-secret
    28  role: roles/secretmanager.secretAccessor

View as plain text