agentic-os/platform/data/cnpg/externalsecret-backup-creds...

30 lines
814 B
YAML

# ExternalSecret: CNPG barman backup credentials for MinIO.
# Infisical paths to pre-populate (in /agentic-os/):
# MINIO_ACCESS_KEY_ID → MinIO access key
# MINIO_ACCESS_KEY_SECRET → MinIO secret key
---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: cnpg-backup-s3-creds
namespace: platform-data
annotations:
argocd.argoproj.io/sync-wave: "-1"
spec:
refreshInterval: 1h
secretStoreRef:
name: infisical
kind: ClusterSecretStore
target:
name: cnpg-backup-s3-creds
creationPolicy: Owner
data:
- secretKey: ACCESS_KEY_ID
remoteRef:
key: CNPG_BACKUP_ACCESS_KEY_ID
decodingStrategy: Base64
- secretKey: ACCESS_KEY_SECRET
remoteRef:
key: CNPG_BACKUP_ACCESS_KEY_SECRET
decodingStrategy: Base64