kubernetes/apps/ai/t3-code-operator/instance/externalsecret.yaml
1
---
2
# yaml-language-server: $schema=https://k8s-schemas.home-operations.com/external-secrets.io/externalsecret_v1.json
3
apiVersion: external-secrets.io/v1
4
kind: ExternalSecret
5
metadata:
6
name: t3-code-config
7
spec:
8
refreshInterval: 5m
9
secretStoreRef:
10
kind: ClusterSecretStore
11
name: onepassword-connect
12
target:
13
name: t3-code-config
14
creationPolicy: Owner
15
template:
16
data:
17
CLAUDE_CODE_OAUTH_TOKEN: "{{ .CLAUDE_CODE_OAUTH_TOKEN }}"
18
LITELLM_API_KEY: "{{ .LITELLM_MASTER_KEY }}"
19
MEMINI_API_KEY: "{{ .MEMINI_API_KEY }}"
20
CONTEXT7_API_KEY: "{{ .CONTEXT7_API_KEY }}"
21
GH_TOKEN: "{{ .GITHUB_PAT }}"
22
GITHUB_TOKEN: "{{ .GITHUB_PAT }}"
23
GITHUB_PERSONAL_ACCESS_TOKEN: "{{ .GITHUB_PAT }}"
24
data:
25
- secretKey: MEMINI_API_KEY
26
remoteRef:
27
key: memini
28
property: MEMINI_API_KEY
29
dataFrom:
30
- extract:
31
key: t3-code
32
- extract:
33
key: litellm
34
- extract:
35
key: context7-mcp
36
---
37
apiVersion: external-secrets.io/v1
38
kind: ExternalSecret
39
metadata:
40
name: t3-code-git-signing
41
spec:
42
refreshInterval: 5m
43
secretStoreRef:
44
kind: ClusterSecretStore
45
name: onepassword-connect
46
target:
47
name: t3-code-git-signing
48
creationPolicy: Owner
49
template:
50
data:
51
id_signing: "{{ .SSH_SIGNING_KEY }}"
52
id_signing.pub: "{{ .SSH_SIGNING_PUB }}"
53
dataFrom:
54
- extract:
55
key: t3-code