feat: add external secret

mrsimonemms · Nov 10, 2024 · a069c0c · a069c0c
1 parent dfc285e
commit a069c0c
Show file tree

Hide file tree

Showing 6 changed files with 140 additions and 0 deletions.
diff --git a/registry/clusters/dev/components/external-dns/application.yaml b/registry/clusters/dev/components/external-dns/application.yaml
@@ -0,0 +1,28 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: external-dns
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "10"
+spec:
+  project: default
+  source:
+    chart: external-dns
+    repoURL: registry-1.docker.io/bitnamicharts
+    targetRevision: 8.5.1
+    helm:
+      valuesObject:
+        provider: cloudflare
+        cloudflare:
+          secretName: cloudflare
+          proxied: false
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: external-dns
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
diff --git a/registry/clusters/dev/components/external-dns/secret.yaml b/registry/clusters/dev/components/external-dns/secret.yaml
@@ -0,0 +1,18 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: cloudflare-api-token
+  namespace: external-dns
+  annotations:
+    argocd.argoproj.io/sync-wave: "10"
+spec:
+  refreshInterval: 10s
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: infisical
+  target:
+    name: cloudflare
+  data:
+    - secretKey: cloudflare_api_token
+      remoteRef:
+        key: CLOUDFLARE_API_TOKEN
diff --git a/registry/clusters/dev/external-dns.yaml b/registry/clusters/dev/external-dns.yaml
@@ -0,0 +1,24 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: external-secrets-dns
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "30"
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: https://github.com/mrsimonemms/infrastructure
+    path: registry/clusters/dev/components/external-dns
+    targetRevision: HEAD
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: external-dns
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
diff --git a/registry/clusters/prod/components/external-dns/application.yaml b/registry/clusters/prod/components/external-dns/application.yaml
@@ -0,0 +1,28 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: external-dns
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "10"
+spec:
+  project: default
+  source:
+    chart: external-dns
+    repoURL: registry-1.docker.io/bitnamicharts
+    targetRevision: 8.5.1
+    helm:
+      valuesObject:
+        provider: cloudflare
+        cloudflare:
+          secretName: cloudflare
+          proxied: false
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: external-dns
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
diff --git a/registry/clusters/prod/components/external-dns/secret.yaml b/registry/clusters/prod/components/external-dns/secret.yaml
@@ -0,0 +1,18 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: cloudflare-api-token
+  namespace: external-dns
+  annotations:
+    argocd.argoproj.io/sync-wave: "10"
+spec:
+  refreshInterval: 10s
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: infisical
+  target:
+    name: cloudflare
+  data:
+    - secretKey: cloudflare_api_token
+      remoteRef:
+        key: CLOUDFLARE_API_TOKEN
diff --git a/registry/clusters/prod/external-dns.yaml b/registry/clusters/prod/external-dns.yaml
@@ -0,0 +1,24 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: external-secrets-dns
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "30"
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: https://github.com/mrsimonemms/infrastructure
+    path: registry/clusters/prod/components/external-dns
+    targetRevision: HEAD
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: external-dns
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true