schemas/k8s/secrets.yaml

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
  name: schemas
spec:
  refreshInterval: 1h
  secretStoreRef:
    name: external-secrets
    kind: ClusterSecretStore
  target:
    creationPolicy: Owner
    template:
      mergePolicy: Merge
      engineVersion: 'v2'
      data:
        POSTGRES_URL: "postgres://{{ .DB_USERNAME }}:{{ .DB_PASSWORD }}@{{ .DB_HOST }}:{{ .DB_PORT }}/schemas?sslmode=disable"
        API_KEY: "{{ .API_KEY }}"
  dataFrom:
  - extract:
      key: services/schemas
  - extract:
      key: rds/postgres/prod-psql
  - extract:
      key: mq/rabbit/prod