Adds the real Vault Agent secret-rendering templates and non-secret env vars for authentik, vaultwarden, and wazuh - sanitized (real domain/email/SMTP provider genericized, kv/<host>/... paths use a generic 'host' placeholder instead of the real hostname). This is the standing pattern for the rest of stacks/ going forward.
4 lines
275 B
Bash
4 lines
275 B
Bash
INDEXER_PASSWORD={{ with secret "kv/host/wazuh" }}{{ .Data.data.indexer_password }}{{ end }}
|
|
API_PASSWORD={{ with secret "kv/host/wazuh" }}{{ .Data.data.api_password }}{{ end }}
|
|
DASHBOARD_PASSWORD={{ with secret "kv/host/wazuh" }}{{ .Data.data.dashboard_password }}{{ end }}
|