From 2bb81e87e83f503e097899bfa3554ca954b6eefc Mon Sep 17 00:00:00 2001
From: dvirlabs <dvirlabs@gmail.com>
Date: Sun, 25 May 2025 04:40:43 +0300
Subject: [PATCH] Add Application to deploy external secret

---
 argocd-apps/external-secrets-clients.yaml     | 22 +++++++++++++++++++
 .../wikijs/external-secret.yaml               | 18 +++++++++++++++
 2 files changed, 40 insertions(+)
 create mode 100644 argocd-apps/external-secrets-clients.yaml
 create mode 100644 manifests/external-secrets-clients/wikijs/external-secret.yaml

diff --git a/argocd-apps/external-secrets-clients.yaml b/argocd-apps/external-secrets-clients.yaml
new file mode 100644
index 0000000..9db8b2b
--- /dev/null
+++ b/argocd-apps/external-secrets-clients.yaml
@@ -0,0 +1,22 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: external-secrets-clients
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://git.dvirlabs.com/dvirlabs/dev-tools.git
+    targetRevision: HEAD
+    path: external-secrets-clients
+    directory:
+      recurse: true
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: dev-tools
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
diff --git a/manifests/external-secrets-clients/wikijs/external-secret.yaml b/manifests/external-secrets-clients/wikijs/external-secret.yaml
new file mode 100644
index 0000000..ac66113
--- /dev/null
+++ b/manifests/external-secrets-clients/wikijs/external-secret.yaml
@@ -0,0 +1,18 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: wikijs-db-secret
+  namespace: dev-tools
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: vault-general-secrets
+    kind: ClusterSecretStore
+  target:
+    name: wikijs-db-secret
+    creationPolicy: Owner
+  data:
+    - secretKey: password
+      remoteRef:
+        key: wikijs-db
+        property: password