feat(keycloak): use ESO

2025-08-30 12:16:17 +09:00
parent e7ed3a1a67
commit 57c75689fd
3 changed files with 238 additions and 54 deletions
--- a/keycloak/keycloak-credentials-external-secret.gomplate.yaml
+++ b/keycloak/keycloak-credentials-external-secret.gomplate.yaml
@@ -0,0 +1,22 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: keycloak-credentials
+  namespace: {{ .Env.KEYCLOAK_NAMESPACE }}
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: vault-secret-store
+    kind: ClusterSecretStore
+  target:
+    name: keycloak-credentials
+    creationPolicy: Owner
+  data:
+    - secretKey: admin-user
+      remoteRef:
+        key: keycloak/admin
+        property: username
+    - secretKey: password
+      remoteRef:
+        key: keycloak/admin
+        property: password