feat(rook): preprovision rook dash pass

buroa · Dec 19, 2023 · d941ef9 · d941ef9
1 parent 10bfdda
commit d941ef9
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 0 deletions.
diff --git a/kubernetes/apps/rook-ceph/rook-ceph/app/externalsecret.yaml b/kubernetes/apps/rook-ceph/rook-ceph/app/externalsecret.yaml
@@ -0,0 +1,18 @@
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: rook-ceph-dashboard
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-connect
+  target:
+    name: rook-ceph-dashboard-password # rook expects this name
+    template:
+      engineVersion: v2
+      data:
+        password: "{{ .ROOK_DASHBOARD_PASSWORD }}"
+  dataFrom:
+    - extract:
+        key: rook
diff --git a/kubernetes/apps/rook-ceph/rook-ceph/app/kustomization.yaml b/kubernetes/apps/rook-ceph/rook-ceph/app/kustomization.yaml
@@ -3,3 +3,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./helmrelease.yaml
+  - ./externalsecret.yaml
diff --git a/kubernetes/apps/rook-ceph/rook-ceph/ks.yaml b/kubernetes/apps/rook-ceph/rook-ceph/ks.yaml
@@ -6,6 +6,8 @@ metadata:
   namespace: flux-system
 spec:
   targetNamespace: rook-ceph
+  dependsOn:
+    - name: cluster-apps-external-secrets-stores
   path: ./kubernetes/apps/rook-ceph/rook-ceph/app
   prune: true
   sourceRef: