unkinben
588b4a5f78
Deploy artifactapi v3 with separate API and UI deployments, CNPG PostgreSQL cluster with pooler, and Redis.
70 lines
1.4 KiB
YAML
70 lines
1.4 KiB
YAML
---
|
|
apiVersion: secrets.hashicorp.com/v1beta1
|
|
kind: VaultStaticSecret
|
|
metadata:
|
|
name: environment
|
|
namespace: artifactapi
|
|
spec:
|
|
destination:
|
|
create: true
|
|
name: environment
|
|
overwrite: false
|
|
hmacSecretData: true
|
|
mount: kv
|
|
path: service/artifactapi/environment
|
|
refreshAfter: 5m
|
|
type: kv-v2
|
|
vaultAuthRef: default
|
|
---
|
|
apiVersion: secrets.hashicorp.com/v1beta1
|
|
kind: VaultStaticSecret
|
|
metadata:
|
|
name: postgres-password
|
|
namespace: artifactapi
|
|
spec:
|
|
destination:
|
|
create: true
|
|
name: postgres-password
|
|
overwrite: true
|
|
hmacSecretData: true
|
|
mount: kv
|
|
path: service/artifactapi/postgres-password
|
|
refreshAfter: 5m
|
|
type: kv-v2
|
|
vaultAuthRef: default
|
|
### change auth ref to default from default1
|
|
---
|
|
apiVersion: secrets.hashicorp.com/v1beta1
|
|
kind: VaultStaticSecret
|
|
metadata:
|
|
name: postgres-credentials
|
|
namespace: artifactapi
|
|
spec:
|
|
destination:
|
|
create: true
|
|
name: postgres-credentials
|
|
overwrite: true
|
|
hmacSecretData: true
|
|
mount: kv
|
|
path: kubernetes/namespace/artifactapi/default/postgres-credentials
|
|
refreshAfter: 5m
|
|
type: kv-v2
|
|
vaultAuthRef: default1
|
|
---
|
|
apiVersion: secrets.hashicorp.com/v1beta1
|
|
kind: VaultStaticSecret
|
|
metadata:
|
|
name: environment
|
|
namespace: artifactapi
|
|
spec:
|
|
destination:
|
|
create: true
|
|
name: environment
|
|
overwrite: true
|
|
hmacSecretData: true
|
|
mount: kv
|
|
path: kubernetes/namespace/artifactapi/default/environment
|
|
refreshAfter: 5m
|
|
type: kv-v2
|
|
vaultAuthRef: default1
|