add velero-aws external secret

argocd/applications.yaml

@@ -588,3 +588,21 @@ spec:
       - CreateNamespace=true
     automated:
       enabled: true
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: velero-secret
+  namespace: argocd
+spec:
+  destination:
+    namespace: velero
+    server: https://kubernetes.default.svc
+  project: default
+  source:
+    path: argocd/infra/velero-secret
+    repoURL: https://gogs.jibby.org/jhb2345/server
+    targetRevision: HEAD
+  syncPolicy:
+    automated:
+      enabled: true

argocd/infra/velero-secret/velero-secret.yaml

@@ -0,0 +1,34 @@
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: velero-aws
+  namespace: velero
+spec:
+  target:
+    name: velero-aws
+    deletionPolicy: Delete
+    template:
+      type: Opaque
+      data:
+        credentials: |-
+          [default]
+          aws_access_key_id = {{ .access }}
+          aws_secret_access_key = {{ .secret }}
+  data:
+    - secretKey: access
+      sourceRef:
+        storeRef:
+          name: bitwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: 7f710887-0432-4594-ba47-b3fb0011bb4e
+        property: username
+    - secretKey: secret
+      sourceRef:
+        storeRef:
+          name: bitwarden-login
+          kind: ClusterSecretStore
+      remoteRef:
+        key: 7f710887-0432-4594-ba47-b3fb0011bb4e
+        property: password