Files
snow/apps/misc/bitwarden.yaml
T
2025-08-03 19:07:30 +02:00

48 lines
1.2 KiB
YAML

apiVersion: external-secrets.io/v1
kind: ClusterSecretStore
metadata:
name: bitwarden
spec:
provider:
bitwardensecretsmanager:
apiURL: https://vault.bitwarden.eu/api
identityURL: https://vault.bitwarden.eu/identity
organizationID: b461238b-9b93-4598-b12c-b32c00834ab6
projectID: b63f0f85-2c6f-4f99-b999-b32c009d7bdf
auth:
secretRef:
credentials:
namespace: external-secrets
name: bitwarden-access-token
key: token
bitwardenServerSDKURL: https://bitwarden-sdk-server.external-secrets.svc.cluster.local:9998
caProvider:
type: Secret
namespace: external-secrets
name: bitwarden-tls-certs
key: ca.crt
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: bitwarden-tls-certs
namespace: external-secrets
spec:
secretName: bitwarden-tls-certs
dnsNames:
- bitwarden-sdk-server.external-secrets.svc.cluster.local
- external-secrets-bitwarden-sdk-server.external-secrets.svc.cluster.local
- localhost
ipAddresses:
- 127.0.0.1
- ::1
privateKey:
algorithm: RSA
encoding: PKCS8
size: 2048
issuerRef:
name: selfsigned
kind: ClusterIssuer
group: cert-manager.io