fix: source flux ui login from doppler

2026-05-05 06:26:48 +00:00
parent c416610f4f
commit 95c4fafd4d
6 changed files with 49 additions and 1 deletions
@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - weave-gitops-auth-externalsecret.yaml
@@ -0,0 +1,25 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: weave-gitops-auth
+  namespace: flux-system
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: doppler-hetznerterra
+    kind: ClusterSecretStore
+  target:
+    name: cluster-user-auth
+    creationPolicy: Owner
+    template:
+      type: Opaque
+      data:
+        username: "{{ .fluxUiAdminUsername }}"
+        password: "{{ .fluxUiAdminPasswordHash }}"
+  data:
+    - secretKey: fluxUiAdminUsername
+      remoteRef:
+        key: FLUX_UI_ADMIN_USERNAME
+    - secretKey: fluxUiAdminPasswordHash
+      remoteRef:
+        key: FLUX_UI_ADMIN_PASSWORD_HASH
@@ -23,8 +23,8 @@ spec:
      pullPolicy: IfNotPresent
    adminUser:
      create: true
+      createSecret: false
      username: admin
-      passwordHash: "$2a$10$P/tHQ1DNFXdvX0zRGA8LPeSOyb0JXq9rP3fZ4W8HGTpLV7qHDlWhe"
    rbac:
      impersonationResourceNames:
        - admin
@@ -0,0 +1,17 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: addon-flux-ui-secrets
+  namespace: flux-system
+spec:
+  interval: 10m
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: platform
+  path: ./infrastructure/addons/flux-ui-secrets
+  dependsOn:
+    - name: addon-external-secrets-store
+  wait: false
+  timeout: 5m
+  suspend: false
@@ -11,6 +11,7 @@ spec:
    name: platform
  path: ./infrastructure/addons/flux-ui
  dependsOn:
+    - name: addon-flux-ui-secrets
    - name: addon-tailscale-operator
    - name: addon-tailscale-proxyclass
  wait: false
@@ -11,6 +11,7 @@ resources:
  - kustomization-observability-secrets.yaml
  - kustomization-observability.yaml
  - kustomization-observability-content.yaml
+  - kustomization-flux-ui-secrets.yaml
  - kustomization-flux-ui.yaml
  - kustomization-rancher-secrets.yaml
  - kustomization-rancher.yaml