diff --git a/charts/py-app/templates/external-secrets.yaml b/charts/py-app/templates/external-secrets.yaml index 4db2558..e47658f 100644 --- a/charts/py-app/templates/external-secrets.yaml +++ b/charts/py-app/templates/external-secrets.yaml @@ -10,12 +10,16 @@ metadata: argocd.argoproj.io/hook: PreSync,Sync argocd.argoproj.io/sync-wave: "-1" spec: - refreshInterval: {{ default "1h" $val.refreshInterval }} # rate SecretManager pulls GCPSM + refreshInterval: {{ default "1h" $val.refreshInterval }} secretStoreRef: kind: ClusterSecretStore - name: {{ $val.secretStoreName }} # name of the SecretStore (or kind specified) + name: {{ $val.secretStoreName }} target: name: {{ $val.targetName }} + template: + metadata: + labels: + external-secrets/managed: "true" # ArgoCD will not manage the Secret that has this label creationPolicy: {{ default "Owner" $val.targetCreationPolicy }} deletionPolicy: {{ default "Retain" $val.targetDeletionPolicy }} dataFrom: {{ toYaml $val.dataFrom | nindent 4 }}