From abdc58e9c3bba6c11fa38efba26d8f64bd8b138e Mon Sep 17 00:00:00 2001
From: Joseph Hanson <joe@veri.dev>
Date: Tue, 16 Jul 2024 06:57:38 -0500
Subject: [PATCH] add atuin postgres push secret

---
 .../cluster/pushsecret.yaml                   | 30 +++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/kubernetes/apps/database/crunchy-postgres-operator/cluster/pushsecret.yaml b/kubernetes/apps/database/crunchy-postgres-operator/cluster/pushsecret.yaml
index 72332f8e..f29fd302 100644
--- a/kubernetes/apps/database/crunchy-postgres-operator/cluster/pushsecret.yaml
+++ b/kubernetes/apps/database/crunchy-postgres-operator/cluster/pushsecret.yaml
@@ -158,3 +158,33 @@ spec:
         remoteRef:
           remoteKey: radarr
           property: RADARR_POSTGRES_PASSWORD
+---
+# yaml-language-server: $schema=https://ks.hsn.dev/external-secrets.io/pushsecret_v1alpha1.json
+apiVersion: external-secrets.io/v1alpha1
+kind: PushSecret
+metadata:
+  name: atuin
+spec:
+  refreshInterval: 1h
+  secretStoreRefs:
+    - name: onepassword-connect
+      kind: ClusterSecretStore
+  selector:
+    secret:
+      name: postgres-pguser-atuin
+  data:
+    - match:
+        secretKey: host
+        remoteRef:
+          remoteKey: atuin
+          property: ATUIN_POSTGRES_HOST
+    - match:
+        secretKey: user
+        remoteRef:
+          remoteKey: atuin
+          property: ATUIN_POSTGRES_USER
+    - match:
+        secretKey: password
+        remoteRef:
+          remoteKey: atuin
+          property: ATUIN_POSTGRES_PASSWORD