kube-cascade/tubearchivist/oauth2-proxy-secret.yaml

35 lines
666 B
YAML

---
apiVersion: generators.external-secrets.io/v1alpha1
kind: Password
metadata:
name: cookie-secret
namespace: tubearchivist
spec:
length: 32
digits: 5
symbols: 3
symbolCharacters: "-_"
noUpper: false
allowRepeat: true
---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: "oauth2-proxy"
namespace: tubearchivist
spec:
refreshInterval: "30m"
target:
name: oauth2-proxy
dataFrom:
- sourceRef:
generatorRef:
apiVersion: generators.external-secrets.io/v1alpha1
kind: Password
name: "cookie-secret"
rewrite:
- regexp:
source: ".*"
target: "cookie_secret"