2026-08-13 10:27:13 +02:00
|
|
|
# Apply only after ops-mason wrap-migrate has filled
|
|
|
|
|
# platform/workloads/audit-core/senders. Until then the sender registry is
|
|
|
|
|
# Secret audit-core-senders, minted in-cluster (see operator-runbook).
|
|
|
|
|
---
|
|
|
|
|
apiVersion: external-secrets.io/v1
|
|
|
|
|
kind: ExternalSecret
|
|
|
|
|
metadata:
|
|
|
|
|
name: audit-core-senders
|
|
|
|
|
namespace: audit-core
|
|
|
|
|
spec:
|
|
|
|
|
refreshInterval: 1h
|
|
|
|
|
secretStoreRef:
|
|
|
|
|
kind: ClusterSecretStore
|
|
|
|
|
name: openbao-audit-core
|
|
|
|
|
target:
|
2026-09-28 15:56:50 +02:00
|
|
|
# Explicit target metadata prevents ESO copying source last-applied annotations.
|
|
|
|
|
template:
|
|
|
|
|
metadata: {}
|
2026-08-13 10:27:13 +02:00
|
|
|
name: audit-core-senders
|
|
|
|
|
creationPolicy: Owner
|
|
|
|
|
deletionPolicy: Retain
|
|
|
|
|
data:
|
|
|
|
|
- secretKey: senders.json
|
|
|
|
|
remoteRef:
|
|
|
|
|
key: workloads/audit-core/senders
|
|
|
|
|
property: senders.json
|
