kubernetes/apps/ai/hermes/app/externalsecret.yaml
1
---
2
# yaml-language-server: $schema=https://k8s-schemas.home-operations.com/external-secrets.io/externalsecret_v1.json
3
apiVersion: external-secrets.io/v1
4
kind: ExternalSecret
5
metadata:
6
name: hermes-config
7
spec:
8
refreshInterval: 5m
9
secretStoreRef:
10
kind: ClusterSecretStore
11
name: onepassword-connect
12
target:
13
name: hermes-config
14
creationPolicy: Owner
15
template:
16
data:
17
API_SERVER_KEY: "{{ .API_SERVER_KEY }}"
18
GH_TOKEN: "{{ .GH_TOKEN }}"
19
LITELLM_API_KEY: "{{ .LITELLM_MASTER_KEY }}"
20
MEMINI_API_KEY: "{{ .MEMINI_API_KEY }}"
21
templateFrom:
22
- configMap:
23
name: hermes-configmap
24
items:
25
- key: env
26
data:
27
- secretKey: MEMINI_API_KEY
28
remoteRef:
29
key: memini
30
property: MEMINI_API_KEY
31
- secretKey: KOMENT_HERMES_TOKEN
32
remoteRef:
33
key: koment
34
property: KOMENT_HERMES_TOKEN
35
dataFrom:
36
- extract:
37
key: litellm
38
- extract:
39
key: hermes
40
---
41
apiVersion: external-secrets.io/v1
42
kind: ExternalSecret
43
metadata:
44
name: hermes-matrix-access
45
spec:
46
refreshInterval: 5m
47
secretStoreRef:
48
kind: ClusterSecretStore
49
name: onepassword-connect
50
target:
51
name: hermes-matrix-access
52
creationPolicy: Owner
53
template:
54
data:
55
MATRIX_HOMESERVER: "{{ .MATRIX_HOMESERVER }}"
56
MATRIX_ACCESS_TOKEN: "{{ .MATRIX_ACCESS_TOKEN }}"
57
MATRIX_ROOM_CLUSTER: "{{ .MATRIX_ROOM_CLUSTER }}"
58
MATRIX_ROOM_ASSISTANT: "{{ .MATRIX_ROOM_ASSISTANT }}"
59
MATRIX_ROOM_HOME: "{{ .MATRIX_ROOM_HOME }}"
60
MATRIX_ROOM_NOTIFY: "{{ .MATRIX_ROOM_NOTIFY }}"
61
MATRIX_ROOM_ALERTS: "{{ .MATRIX_ROOM_ALERTS }}"
62
MATRIX_ROOM_DIGEST: "{{ .MATRIX_ROOM_DIGEST }}"
63
MATRIX_ROOM_INBOX: "{{ .MATRIX_ROOM_INBOX }}"
64
MATRIX_ROOM_DM: "{{ .MATRIX_ROOM_DM }}"
65
dataFrom:
66
- extract:
67
key: hermes
68
- extract:
69
key: hermes-rooms