Cleanup bitwarden setup

This commit is contained in:
2025-08-02 23:22:40 +02:00
parent 8ac455c2a6
commit 71b69533f6
3 changed files with 47 additions and 47 deletions
-47
View File
@@ -22,50 +22,3 @@ spec:
valuesObject:
bitwarden-sdk-server:
enabled: true
---
apiVersion: external-secrets.io/v1
kind: ClusterSecretStore
metadata:
name: bitwarden
spec:
provider:
bitwardensecretsmanager:
apiURL: https://vault.bitwarden.eu/api
identityURL: https://vault.bitwarden.eu/identity
auth:
secretRef:
credentials:
namespace: external-secrets
name: bitwarden-access-token
key: token
caProvider:
type: Secret
namespace: external-secrets
name: bitwarden-tls-certs
key: ca.crt
organizationID: b461238b-9b93-4598-b12c-b32c00834ab6
projectID: b63f0f85-2c6f-4f99-b999-b32c009d7bdf
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: bitwarden-tls-certs
namespace: external-secrets
spec:
secretName: bitwarden-tls-certs
dnsNames:
- bitwarden-sdk-server.external-secrets.svc.cluster.local
- external-secrets-bitwarden-sdk-server.external-secrets.svc.cluster.local
- localhost
ipAddresses:
- 127.0.0.1
- ::1
privateKey:
algorithm: RSA
encoding: PKCS8
size: 2048
issuerRef:
name: selfsigned
kind: ClusterIssuer
group: cert-manager.io
+46
View File
@@ -0,0 +1,46 @@
apiVersion: external-secrets.io/v1
kind: ClusterSecretStore
metadata:
name: bitwarden
spec:
provider:
bitwardensecretsmanager:
apiURL: https://vault.bitwarden.eu/api
identityURL: https://vault.bitwarden.eu/identity
auth:
secretRef:
credentials:
namespace: external-secrets
name: bitwarden-access-token
key: token
caProvider:
type: Secret
namespace: external-secrets
name: bitwarden-tls-certs
key: ca.crt
organizationID: b461238b-9b93-4598-b12c-b32c00834ab6
projectID: b63f0f85-2c6f-4f99-b999-b32c009d7bdf
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: bitwarden-tls-certs
namespace: external-secrets
spec:
secretName: bitwarden-tls-certs
dnsNames:
- bitwarden-sdk-server.external-secrets.svc.cluster.local
- external-secrets-bitwarden-sdk-server.external-secrets.svc.cluster.local
- localhost
ipAddresses:
- 127.0.0.1
- ::1
privateKey:
algorithm: RSA
encoding: PKCS8
size: 2048
issuerRef:
name: selfsigned
kind: ClusterIssuer
group: cert-manager.io
+1
View File
@@ -4,3 +4,4 @@ kind: Kustomization
resources:
- cilium-announcement.yaml
- ip-pool.yaml
- bitwarden.yaml