eso

myapp/custom-values.yaml

@@ -59,13 +59,13 @@ config:
   APP_DEBUG: "false"
 
 secret:
-
-  DB_HOST: mysql.default.svc.cluster.local
-  DB_NAME: applicationdb
-  DB_USER: appuser
-  DB_PASSWORD: MyStrongPassword123
+  name: applicationtest-myapp-secret
 
 
+vault:
+  secretStore: vault
+  secretPath: applicationtest
+  refreshInterval: 1h
 # This is for setting up a service more information can be found here: https://kubernetes.io/docs/concepts/services-networking/service/
 service:
   # This sets the service type more information can be found here: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types

myapp/templates/deployment.yaml

@@ -42,7 +42,7 @@ spec:
           - configMapRef:
               name: {{ include "myapp.fullname" . }}-config
           - secretRef:
-              name: {{ include "myapp.fullname" . }}-secret
+              name: {{ .Values.secret.name }}
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           ports:
             - name: http

myapp/templates/external-secret.yaml

@@ -0,0 +1,19 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: {{ include "myapp.fullname" . }}-secret
+
+spec:
+  refreshInterval: {{ .Values.vault.refreshInterval }}
+
+  secretStoreRef:
+    name: {{ .Values.vault.secretStore }}
+    kind: ClusterSecretStore
+
+  target:
+    name: {{ include "myapp.fullname" . }}-secret
+    creationPolicy: Owner
+
+  dataFrom:
+    - extract:
+        key: {{ .Values.vault.secretPath }}

myapp/templates/secret.yaml

@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: Secret
-
-metadata:
-  name: {{ include "myapp.fullname" . }}-secret
-
-type: Opaque
-
-stringData:
-
-{{- range $key, $value := .Values.secret }}
-  {{ $key }}: "{{ $value }}"
-{{- end }}