chore: Add ExternalSecret for Ansible AWX Credentials and URL (#285)

epam · Aug 28, 2024 · fa4a841 · fa4a841
1 parent 289472f
commit fa4a841
Showing 1 changed file with 31 additions and 0 deletions.
diff --git a/deploy-templates/templates/external-secrets/externalsecret-ci-awx.yaml b/deploy-templates/templates/external-secrets/externalsecret-ci-awx.yaml
@@ -0,0 +1,31 @@
+{{- if and .Values.externalSecrets.enabled .Values.externalSecrets.manageEDPInstallSecrets }}
+{{- $secretStore := include "edp-install.secretStoreName" . }}
+{{- $awsSecretName := .Values.externalSecrets.manageEDPInstallSecretsName }}
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: ci-awx
+spec:
+  target:
+    template:
+      metadata:
+        labels:
+          app.edp.epam.com/secret-type: awx
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: SecretStore
+    name: {{ $secretStore }}
+  data:
+  - secretKey: username
+    remoteRef:
+      key: {{ $awsSecretName }}
+      property: ci-awx.username
+  - secretKey: password
+    remoteRef:
+      key: {{ $awsSecretName }}
+      property: ci-awx.password
+  - secretKey: url
+    remoteRef:
+      key: {{ $awsSecretName }}
+      property: ci-awx.url
+{{- end }}