fix cnpg secret

2026-03-17 13:16:57 -04:00
parent ea27ab3067
commit 37fdf43abe
4 changed files with 5 additions and 3 deletions
--- a/kubernetes/secrets/cloudnativepg/s3-backup-creds.nix
+++ b/kubernetes/secrets/cloudnativepg/s3-backup-creds.nix
@@ -0,0 +1,18 @@
+{ config, ... }:
+{
+  sops.templates."cnpg-s3-backup-creds.yaml" = {
+    mode = "0444";
+    content = ''
+      apiVersion: v1
+      kind: Secret
+      metadata:
+        name: s3-backup-creds
+        namespace: cloudnativepg
+      type: Opaque
+      stringData:
+        s3AccessKey: fmRuq5b96EKqQOGR1prs
+        s3SecretKey: ${config.sops.placeholder.cnpg_s3_backup_key}
+    '';
+    path = "/var/lib/rancher/k3s/server/manifests/secrets/cnpg-s3-backup-creds.yaml";
+  };
+}