added repo

2026-08-26 03:39:42 +05:30
parent 45c25a95af
commit b8575bb8b9
6889 changed files with 1217125 additions and 0 deletions
@@ -0,0 +1,37 @@
+{{- /*
+ESO → K8s Secret that holds the Root CA (cert + key).
+Lives in the cert-manager namespace so the private key stays off app
+namespaces; cert-manager reads it when the ClusterIssuer signs leaf certs.
+*/}}
+{{- if .Values.externalSecret.enabled }}
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: {{ .Values.rootCASecretName }}
+  namespace: {{ .Values.namespace }}
+  annotations:
+    argocd.argoproj.io/sync-wave: "-5"
+    {{- with .Values.commonAnnotations }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+  {{- with .Values.commonLabels }}
+  labels:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+spec:
+  dataFrom:
+    - extract:
+        conversionStrategy: Default
+        key: {{ .Values.externalSecret.vaultPath }}
+        {{- if .Values.externalSecret.vaultVersion }}
+        version: {{ .Values.externalSecret.vaultVersion | quote }}
+        {{- end }}
+  refreshInterval: {{ .Values.externalSecret.refreshInterval | quote }}
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: {{ .Values.externalSecret.secretStoreRef.name }}
+  target:
+    name: {{ .Values.rootCASecretName }}
+    creationPolicy: Owner
+    deletionPolicy: Retain
+{{- end }}