Initial commit

apps/gitlab/manifests/redis-sentinel-ha.yaml

@@ -0,0 +1,33 @@
+---
+# Password generator and ESO for GitLab Redis
+apiVersion: generators.external-secrets.io/v1alpha1
+kind: Password
+metadata:
+  name: gitlab-redis-password
+  namespace: gitlab
+spec:
+  length: 32
+  digits: 5
+  symbols: 0
+  noUpper: false
+  allowRepeat: true
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: gitlab-redis-password
+  namespace: gitlab
+spec:
+  refreshInterval: "0"  # Generate once, never rotate (Password generator creates new value each refresh)
+  target:
+    name: redis-gitlab-secret
+    creationPolicy: Owner
+    template:
+      data:
+        password: "{{ .password }}"
+  dataFrom:
+    - sourceRef:
+        generatorRef:
+          apiVersion: generators.external-secrets.io/v1alpha1
+          kind: Password
+          name: gitlab-redis-password