wehub-resource-sync
d25d482dc2
Publish CLI Package / publish-npm (push) Waiting to run
Publish Python SDK / publish-pypi (push) Waiting to run
Publish TypeScript SDK / publish-npm (push) Waiting to run
CI / Migrate Dev DB (push) Has been skipped
CI / Detect Version (push) Has been cancelled
CI / Migrate DB (push) Has been cancelled
CI / Build Dev ECR (./docker/app.Dockerfile, ECR_APP) (push) Has been cancelled
CI / Build Dev ECR (./docker/db.Dockerfile, ECR_MIGRATIONS) (push) Has been cancelled
CI / Build Dev ECR (./docker/pii.Dockerfile, ECR_PII) (push) Has been cancelled
CI / Build Dev ECR (./docker/realtime.Dockerfile, ECR_REALTIME) (push) Has been cancelled
CI / Deploy Trigger.dev (Dev) (push) Has been cancelled
CI / Build AMD64 (./docker/app.Dockerfile, ECR_APP, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build AMD64 (./docker/db.Dockerfile, ECR_MIGRATIONS, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build AMD64 (./docker/pii.Dockerfile, ECR_PII, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build AMD64 (./docker/realtime.Dockerfile, ECR_REALTIME, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/app.Dockerfile, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/db.Dockerfile, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/pii.Dockerfile, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/realtime.Dockerfile, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Check Docs Changes (push) Has been cancelled
CI / Process Docs (push) Has been cancelled
CI / Create GitHub Release (push) Has been cancelled
CI / Test and Build (push) Has been cancelled
42 lines
1.8 KiB
YAML
42 lines
1.8 KiB
YAML
{{- if and .Values.externalSecrets.enabled .Values.app.enabled }}
|
|
# ExternalSecret for app credentials (syncs from external secret managers)
|
|
#
|
|
# The data list is generated by iterating every non-empty entry in
|
|
# externalSecrets.remoteRefs.app. This lets users sync arbitrary sensitive
|
|
# keys (OPENAI_API_KEY, AWS_SECRET_ACCESS_KEY, ...) — not just the legacy
|
|
# six (BETTER_AUTH_SECRET, ENCRYPTION_KEY, INTERNAL_API_SECRET, CRON_SECRET,
|
|
# API_ENCRYPTION_KEY, REDIS_URL). Each entry's value may be either:
|
|
# - a string: treated as the remoteRef.key (legacy form)
|
|
# - a map: passed through as the remoteRef block (e.g. {key, property,
|
|
# version, decodingStrategy, conversionStrategy, metadataPolicy})
|
|
apiVersion: external-secrets.io/{{ .Values.externalSecrets.apiVersion | default "v1beta1" }}
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: {{ include "sim.fullname" . }}-app-secrets
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
{{- include "sim.app.labels" . | nindent 4 }}
|
|
spec:
|
|
refreshInterval: {{ .Values.externalSecrets.refreshInterval | quote }}
|
|
secretStoreRef:
|
|
name: {{ required "externalSecrets.secretStoreRef.name is required when externalSecrets.enabled=true" .Values.externalSecrets.secretStoreRef.name }}
|
|
kind: {{ .Values.externalSecrets.secretStoreRef.kind | default "ClusterSecretStore" }}
|
|
target:
|
|
name: {{ include "sim.fullname" . }}-app-secrets
|
|
creationPolicy: Owner
|
|
data:
|
|
{{- range $secretKey, $ref := .Values.externalSecrets.remoteRefs.app }}
|
|
{{- if $ref }}
|
|
{{- if kindIs "string" $ref }}
|
|
- secretKey: {{ $secretKey }}
|
|
remoteRef:
|
|
key: {{ $ref }}
|
|
{{- else if kindIs "map" $ref }}
|
|
- secretKey: {{ $secretKey }}
|
|
remoteRef:
|
|
{{- toYaml $ref | nindent 8 }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|