Files
Kubernetes-Manifests/applications/gotify/gotify/infisicalsecret.yaml
T
Jeffrey 3c24cd4b9d gotify: migrate to envFrom with per-container InfisicalSecrets
Stores the fully assembled database DSN in Infisical instead of building it from three helper vars with $() interpolation, which envFrom cannot feed.
2026-08-23 23:38:16 +02:00

26 lines
736 B
YAML

apiVersion: secrets.infisical.com/v1alpha1
kind: InfisicalSecret
metadata:
name: gotify-app-secrets
namespace: infisical
spec:
hostAPI: https://infisical.jsme.be
resyncInterval: 30
authentication:
kubernetesAuth:
identityId: "5458def7-7c63-40d2-95da-41c614d0933a"
serviceAccountRef:
name: infisical-auth
namespace: infisical
autoCreateServiceAccountToken: true
secretsScope:
projectSlug: "kubernetes"
envSlug: "prod"
secretsPath: "/gotify/gotify"
# Non-recursive: keys are already named as the container expects.
recursive: false
managedSecretReference:
secretName: gotify-app-secrets
secretNamespace: gotify
secretType: Opaque