From b8e651c21f7cda964802cb10820c4569d66016a9 Mon Sep 17 00:00:00 2001 From: Jory Irving Date: Sun, 11 Feb 2024 12:47:36 -0700 Subject: [PATCH] chore: swap secret to bws --- .../app/externalsecret.yaml | 23 ++++++++----------- .../runners/home-ops-runner.yaml | 2 +- 2 files changed, 10 insertions(+), 15 deletions(-) diff --git a/kubernetes/teyvat/apps/actions-runner-system/actions-runner-controller/app/externalsecret.yaml b/kubernetes/teyvat/apps/actions-runner-system/actions-runner-controller/app/externalsecret.yaml index 8930e9274f..edd4d35871 100644 --- a/kubernetes/teyvat/apps/actions-runner-system/actions-runner-controller/app/externalsecret.yaml +++ b/kubernetes/teyvat/apps/actions-runner-system/actions-runner-controller/app/externalsecret.yaml @@ -2,20 +2,15 @@ apiVersion: external-secrets.io/v1beta1 kind: ExternalSecret metadata: - name: actions-runner-controller-secret + name: &name actions-runner-controller spec: + refreshInterval: "1h" + secretStoreRef: + name: bitwarden-secrets-manager + kind: ClusterSecretStore target: - deletionPolicy: Delete - template: - type: Opaque - data: - github_token: "{{ .github_token }}" + name: *name data: - - secretKey: github_token - sourceRef: - storeRef: - name: bitwarden-fields - kind: ClusterSecretStore - remoteRef: - key: 7647a593-3576-4092-85fe-ac6e00f706e3 - property: arc_token + - secretKey: github_token + remoteRef: + key: actions-runner-controller diff --git a/kubernetes/teyvat/apps/actions-runner-system/actions-runner-controller/runners/home-ops-runner.yaml b/kubernetes/teyvat/apps/actions-runner-system/actions-runner-controller/runners/home-ops-runner.yaml index d3b793b1c7..c776d7f4d3 100644 --- a/kubernetes/teyvat/apps/actions-runner-system/actions-runner-controller/runners/home-ops-runner.yaml +++ b/kubernetes/teyvat/apps/actions-runner-system/actions-runner-controller/runners/home-ops-runner.yaml @@ -42,6 +42,6 @@ spec: namespace: actions-runner-system valuesFrom: - kind: Secret - name: actions-runner-controller-secret + name: actions-runner-controller valuesKey: github_token targetPath: githubConfigSecret.github_token