tegwick
53dcd01219
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da
36 lines
No EOL
1.2 KiB
YAML
36 lines
No EOL
1.2 KiB
YAML
# Forgejo IONOS SMTP password from OpenBao (RAIL-HO-WP-0005-T06).
|
|
#
|
|
# OpenBao path (platform KV v2): workloads/forgejo/forgejo-mailer
|
|
# Field: PASSWD (OpenBao key); synced to Secret key MAILER_PASSWD for Helm
|
|
#
|
|
# Prereqs on railiance01:
|
|
# - External Secrets Operator (make eso-deploy)
|
|
# - ClusterSecretStore openbao-forgejo (railiance-platform openbao-secretstore)
|
|
# - OpenBao role external-secrets-forgejo (make openbao-configure-external-secrets-forgejo)
|
|
apiVersion: external-secrets.io/v1beta1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: forgejo-mailer
|
|
namespace: forgejo
|
|
labels:
|
|
app.kubernetes.io/name: forgejo
|
|
app.kubernetes.io/part-of: railiance-apps
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
kind: ClusterSecretStore
|
|
name: openbao-forgejo
|
|
target:
|
|
# Explicit target metadata prevents ESO copying source last-applied annotations.
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/name: forgejo
|
|
app.kubernetes.io/part-of: railiance-apps
|
|
name: forgejo-mailer
|
|
creationPolicy: Owner
|
|
data:
|
|
- secretKey: MAILER_PASSWD
|
|
remoteRef:
|
|
key: workloads/forgejo/forgejo-mailer
|
|
property: PASSWD |