6ccba7d1e3
- Add postgresql certificate to secrets for secure communication in staging and production environments - Adapt for TLS communication with PostgreSQL - Adapt tasks to handle invalid connections from the connection pool - Migrate to psycopg3 for connection to PostgreSQL
45 lines
1.1 KiB
YAML
45 lines
1.1 KiB
YAML
# eveai-external-secrets.yaml
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: eveai-external-secrets
|
|
namespace: eveai-staging
|
|
spec:
|
|
refreshInterval: 300s
|
|
secretStoreRef:
|
|
name: scaleway-cluster-secret-store
|
|
kind: ClusterSecretStore
|
|
target:
|
|
name: eveai-secrets
|
|
creationPolicy: Owner
|
|
dataFrom:
|
|
# Alle keys uit eveai-postgresql secret
|
|
- extract:
|
|
key: name:eveai-postgresql
|
|
# Alle keys uit eveai-redis secret
|
|
- extract:
|
|
key: name:eveai-redis
|
|
# Alle keys uit eveai-openai secret
|
|
- extract:
|
|
key: name:eveai-openai
|
|
# Alle keys uit eveai-mistral secret
|
|
- extract:
|
|
key: name:eveai-mistral
|
|
# Alle keys uit eveai-app-keys secret
|
|
- extract:
|
|
key: name:eveai-app-keys
|
|
# Alle keys uit eveai-object-storage secret
|
|
- extract:
|
|
key: name:eveai-object-storage
|
|
# Alle keys uit eveai-tem secret
|
|
- extract:
|
|
key: name:eveai-tem
|
|
data:
|
|
# Certificaat als aparte data entry
|
|
- secretKey: REDIS_CERT
|
|
remoteRef:
|
|
key: name:eveai-redis-certificate
|
|
- secretKey: PGSQL_CERT
|
|
remoteRef:
|
|
key: name:eveai-postgresql-certificate
|