22 lines
501 B
YAML

apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: keycloak-client-secret
namespace: my-apps
spec:
refreshInterval: 1h
secretStoreRef:
name: my-secret-store
kind: ClusterSecretStore
target:
name: keycloak-client-secret
template:
engineVersion: v2
data:
keycloak-client-secret: "{{ .client_secret }}"
data:
- secretKey: client_secret
remoteRef:
key: oidc-clients/nextcloud-oidc
property: client_secret