This repository has been archived on 2024-02-11. You can view files and clone it, but cannot push or open issues or pull requests.
valinor/kubernetes/apps/monitoring/thanos/app/externalsecret.yaml

31 lines
809 B
YAML

---
# yaml-language-server: $schema=https://ks.hsn.dev/external-secrets.io/externalsecret_v1beta1.json
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: thanos
namespace: monitoring
spec:
secretStoreRef:
kind: ClusterSecretStore
name: onepassword-connect
target:
name: thanos-s3-secret
creationPolicy: Owner
template:
engineVersion: v2
data:
objstore.yml: |-
type: s3
config:
access_key: {{ .s3_valinor_access_key }}
bucket: {{ .s3_valinor_thanos_bucket }}
endpoint: {{ .s3_valinor_endpoint }}
secret_key: {{ .s3_valinor_secret_key }}
dataFrom:
- extract:
key: s3
rewrite:
- regexp:
source: "(.*)"
target: "s3_$1"