Convert all secrets to SealedSecrets for enhanced security
This commit converts all application secrets to SealedSecrets, preventing
plaintext secrets from being stored in git.
Changes:
- Added .gitignore to prevent future plaintext secret commits
- Created 20 SealedSecret manifests across 8 applications:
* Stalwart (4 secrets): admin credentials, OAuth proxy, OIDC, S3 backup
* Directus (5 secrets): admin, agent token, app secrets, DB, OIDC
* Paperclip (4 secrets): main secrets, auth, OIDC, session
* Forgejo (2 secrets): postgres, backup
* BookStack (2 secrets): OIDC, MySQL
* Passbolt (2 secrets): MariaDB, app secrets
* Pocket ID (1 secret)
- Removed hardcoded secrets from 6 stalwart deployment files
- Replaced plaintext credentials with references to sealed secrets
All sealed secrets have been applied to the cluster and services verified
to be running correctly.
Related: DEV-203
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-01 18:38:27 +00:00
|
|
|
---
|
|
|
|
|
apiVersion: bitnami.com/v1alpha1
|
|
|
|
|
kind: SealedSecret
|
|
|
|
|
metadata:
|
|
|
|
|
creationTimestamp: null
|
|
|
|
|
name: mysql
|
|
|
|
|
namespace: bookstack
|
2026-07-12 12:16:48 +00:00
|
|
|
labels:
|
|
|
|
|
sealedsecrets.bitnami.com/managed: "true"
|
Convert all secrets to SealedSecrets for enhanced security
This commit converts all application secrets to SealedSecrets, preventing
plaintext secrets from being stored in git.
Changes:
- Added .gitignore to prevent future plaintext secret commits
- Created 20 SealedSecret manifests across 8 applications:
* Stalwart (4 secrets): admin credentials, OAuth proxy, OIDC, S3 backup
* Directus (5 secrets): admin, agent token, app secrets, DB, OIDC
* Paperclip (4 secrets): main secrets, auth, OIDC, session
* Forgejo (2 secrets): postgres, backup
* BookStack (2 secrets): OIDC, MySQL
* Passbolt (2 secrets): MariaDB, app secrets
* Pocket ID (1 secret)
- Removed hardcoded secrets from 6 stalwart deployment files
- Replaced plaintext credentials with references to sealed secrets
All sealed secrets have been applied to the cluster and services verified
to be running correctly.
Related: DEV-203
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-01 18:38:27 +00:00
|
|
|
spec:
|
|
|
|
|
encryptedData:
|
|
|
|
|
mysql-database: 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
|
|
|
|
|
mysql-password: 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
|
|
|
|
|
mysql-root-password: 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
|
|
|
|
|
mysql-user: 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
|
|
|
|
|
template:
|
|
|
|
|
metadata:
|
|
|
|
|
creationTimestamp: null
|
|
|
|
|
name: mysql
|
|
|
|
|
namespace: bookstack
|
|
|
|
|
type: Opaque
|
