Files
Kubernetes-Manifests/applications/passbolt/mariadb/infisicalsecret.yaml
T
Jeffrey 77b8bd4475 passbolt: migrate to envFrom with per-container InfisicalSecrets
Also removes the now-stale flat CR files for searxng, outline and passbolt, which ArgoCD would otherwise recreate pointing at emptied folders.
2026-08-23 21:54:06 +02:00

26 lines
753 B
YAML

apiVersion: secrets.infisical.com/v1alpha1
kind: InfisicalSecret
metadata:
name: passbolt-mariadb-secrets
namespace: infisical
spec:
hostAPI: https://infisical.jsme.be
resyncInterval: 30
authentication:
kubernetesAuth:
identityId: "5458def7-7c63-40d2-95da-41c614d0933a"
serviceAccountRef:
name: infisical-auth
namespace: infisical
autoCreateServiceAccountToken: true
secretsScope:
projectSlug: "kubernetes"
envSlug: "prod"
secretsPath: "/passbolt/mariadb"
# Non-recursive: keys are already named as the container expects.
recursive: false
managedSecretReference:
secretName: passbolt-mariadb-secrets
secretNamespace: passbolt
secretType: Opaque