audit-core/deploy/externalsecret-senders.yaml

24 lines
644 B
YAML
Raw Normal View History

# Apply only after ops-mason wrap-migrate has filled
# platform/workloads/audit-core/senders. Until then the sender registry is
# Secret audit-core-senders, minted in-cluster (see operator-runbook).
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: audit-core-senders
namespace: audit-core
spec:
refreshInterval: 1h
secretStoreRef:
kind: ClusterSecretStore
name: openbao-audit-core
target:
name: audit-core-senders
creationPolicy: Owner
deletionPolicy: Retain
data:
- secretKey: senders.json
remoteRef:
key: workloads/audit-core/senders
property: senders.json