added harbor app

secretstores/harbor-admin-credentials.yaml

@@ -0,0 +1,21 @@
+# Vault-backed from the start, same as jenkins-admin-credentials. Key name
+# matches what the chart's existingSecretAdminPasswordKey expects — see
+# devops-infra-helm-charts/helm-overrides/k8s-admin-prd-ase1/harbor/custom-values.yaml.
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: harbor-admin-credentials
+  namespace: harbor
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: vault-backend
+    kind: ClusterSecretStore
+  target:
+    name: harbor-admin-credentials
+    creationPolicy: Owner
+  data:
+    - secretKey: HARBOR_ADMIN_PASSWORD
+      remoteRef:
+        key: harbor/admin
+        property: password