agentic-os/platform/data/cnpg/externalsecret-backup-creds...

28 lines
736 B
YAML

# ExternalSecret: CNPG barman backup credentials for MinIO.
# Infisical paths to pre-populate (in /agentic-os/):
# MINIO_ACCESS_KEY_ID → MinIO access key
# MINIO_ACCESS_KEY_SECRET → MinIO secret key
---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: cnpg-backup-s3-creds
namespace: platform-data
annotations:
argocd.argoproj.io/sync-wave: "-1"
spec:
refreshInterval: 1h
secretStoreRef:
name: infisical
kind: ClusterSecretStore
target:
name: cnpg-backup-s3-creds
creationPolicy: Owner
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
key: MINIO_ACCESS_KEY_ID
- secretKey: ACCESS_KEY_SECRET
remoteRef:
key: MINIO_ACCESS_KEY_SECRET