External Secrets Store

dataplane-template/kustomization.yaml

@@ -4,5 +4,4 @@ resources:
   - konnectapiauthconfiguration.yaml
   - gatewayconfiguration.yaml
   - gateway.yaml
-  - secret.yaml
   - certificate.yaml

dataplane-template/secret.yaml

@@ -1,15 +0,0 @@
-# konghq.com/secret: "true" is required — the Kong Operator's secret
-# watch/cache is scoped to that label; without it, references from
-# KonnectAPIAuthConfiguration.secretRef resolve to "does not exist" even
-# though the Secret is present (see ~/dev/kong/kube/gateway/apigw/secret.yaml).
-apiVersion: v1
-kind: Secret
-metadata:
-  name: ${NAME}-konnect-auth
-  namespace: ${NAMESPACE}
-  labels:
-    konghq.com/credential: konnect
-    konghq.com/secret: "true"
-type: Opaque
-stringData:
-  token: ${KONNECT_PAT_TOKEN}