mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-20 23:16:49 +00:00
32 lines
904 B
YAML
32 lines
904 B
YAML
---
|
|
# Home Assistant OIDC Credentials - External Secret
|
|
#
|
|
# This ExternalSecret syncs Home Assistant OIDC credentials from Vault
|
|
# Credentials are stored in Vault by the sync-homeassistant-oauth.sh script
|
|
# after Authentik blueprint creates the OAuth provider
|
|
#
|
|
# The secret is used by Home Assistant's hass-openid integration
|
|
# to authenticate users via Authentik OIDC
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: homeassistant-oauth
|
|
namespace: home-assistant
|
|
spec:
|
|
secretStoreRef:
|
|
kind: ClusterSecretStore
|
|
name: vault-backend
|
|
target:
|
|
name: homeassistant-oidc-secret
|
|
creationPolicy: Owner
|
|
refreshInterval: 1h
|
|
data:
|
|
- secretKey: client_id
|
|
remoteRef:
|
|
key: secret/homeassistant-oauth
|
|
property: client-id
|
|
- secretKey: client_secret
|
|
remoteRef:
|
|
key: secret/homeassistant-oauth
|
|
property: client-secret
|