ce7cb702218693d08ea6d83464d2457c9250027c

services/stalwart/k8s/base/vault/database.yaml

@@ -0,0 +1,26 @@
+apiVersion: secrets.hashicorp.com/v1beta1
+kind: VaultDynamicSecret
+metadata:
+  name: stalwart-db
+  namespace: stalwart
+spec:
+  mount: database
+  path: static-creds/stalwart
+  allowStaticCreds: true
+  refreshAfter: 5m
+  destination:
+    name: stalwart-db
+    create: true
+    overwrite: true
+    transformation:
+      excludeRaw: true
+      excludes:
+        - .*
+      templates:
+        username:
+          text: '{{ get .Secrets "username" }}'
+        password:
+          text: '{{ get .Secrets "password" }}'
+        dsn:
+          text: 'postgresql://{{ get .Secrets "username" }}:{{ get .Secrets "password" }}@main-rw.postgres.svc.cluster.local:5432/stalwart?sslmode=disable'
+  vaultAuthRef: default