basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
stack.basicstack.de/apps/argocd/repo-basicstack-org-secret-sealed.yaml

22 lines
2.4 KiB
YAML
Raw Normal View History

Add Argo CD sealed secrets for OIDC and repository access Created three SealedSecrets for Argo CD integration: - argocd-oidc-secret: Pocket ID OIDC client credentials - repo-stack-basicstack-de: SSH deploy key for stack repository - repo-basicstack-org: SSH deploy key for basicstack.org repository Repository secrets include argocd.argoproj.io/secret-type label for automatic Argo CD discovery. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-11 17:26:32 +00:00
---
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
creationTimestamp: null
name: repo-basicstack-org
Fix Argo CD sealed secrets namespace mismatch Re-sealed the three Argo CD secrets with namespace: argocd instead of namespace: paperclip to match the kustomization.yaml deployment target. The sealed-secrets controller was failing to unseal these because they were encrypted for the 'paperclip' namespace but Kustomize was deploying them to the 'argocd' namespace. Sealed secrets use strict scope by default, so namespace/name must match exactly. Fixed files: - apps/argocd/argocd-oidc-secret-sealed.yaml - apps/argocd/repo-basicstack-org-secret-sealed.yaml - apps/argocd/repo-stack-basicstack-de-secret-sealed.yaml Root cause: DEV-284 investigation revealed controller error logs showing "no key could decrypt secret" for all three Argo CD sealed secrets. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-12 10:11:39 +00:00
namespace: argocd
Add managed label to argocd sealed secrets Adds the sealedsecrets.bitnami.com/managed: "true" label to all three argocd sealed secrets (argocd-oidc-secret, repo-basicstack-org, repo-stack-basicstack-de) to fix Health Degraded status in Argo CD. This follows the same fix pattern applied in DEV-291, DEV-290, and DEV-289. Closes DEV-293 Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-12 16:26:43 +00:00
labels:
sealedsecrets.bitnami.com/managed: "true"
Add Argo CD sealed secrets for OIDC and repository access Created three SealedSecrets for Argo CD integration: - argocd-oidc-secret: Pocket ID OIDC client credentials - repo-stack-basicstack-de: SSH deploy key for stack repository - repo-basicstack-org: SSH deploy key for basicstack.org repository Repository secrets include argocd.argoproj.io/secret-type label for automatic Argo CD discovery. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-11 17:26:32 +00:00
spec:
encryptedData:
Fix Argo CD sealed secrets namespace mismatch Re-sealed the three Argo CD secrets with namespace: argocd instead of namespace: paperclip to match the kustomization.yaml deployment target. The sealed-secrets controller was failing to unseal these because they were encrypted for the 'paperclip' namespace but Kustomize was deploying them to the 'argocd' namespace. Sealed secrets use strict scope by default, so namespace/name must match exactly. Fixed files: - apps/argocd/argocd-oidc-secret-sealed.yaml - apps/argocd/repo-basicstack-org-secret-sealed.yaml - apps/argocd/repo-stack-basicstack-de-secret-sealed.yaml Root cause: DEV-284 investigation revealed controller error logs showing "no key could decrypt secret" for all three Argo CD sealed secrets. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-12 10:11:39 +00:00
sshPrivateKey: AgCEVBj/i2jC8N/dxB4pgRckKfWaayvdMfRZSfHugsImyCy8EiXAcJhLo7OgXp7xCC5UVgm6wAmo8vW9k9mLnaIuPpQWsRzjKAo0aTLIyCro9xM5G5mqc7JfBufOgnA2gFNSQrqUa13nDOJxilN/SlWeCKuQWtlLppdKZSi+vDokmCPwORPEVOt50btdcQFfk2NQJK8xh+Bc4PimeALXtOLuc8dsWMluHAcA+SvEKmNmpSYlvDTUDcfO/K0882LZPxjKg2uC1HrjxtS25OXkSwcU9KBBh0xRgxUcEF13+SIDgFTiJQ1bQXYanx6FGaPyfobubplujbY3Cew68vtk5yiFepTmxgle1O5Ekw/O5SOBe5G7umQ2zPBB/YhJraFIONcyExOzo5J4KbjE2lHDzSq4eKeVXsDNFHNdD17hEf7dJI70CG1YaDFsFTu+LhdbtAAToHlttCo1bpGcNASIG3pQckXy9ze8+e523IDirpvyU5ipTJySAcI47bd9fuCqtrQEdZy5cxD8iK/DUCOQ6VvnNRizwDL3pxZyMHkpIhFVrWmbOFuPLrI/hdznV8EfV7lGzfs5eNGTH7G1axcwCIl6Z81oWcY2mvlC+OJbdDLvLdlKxLJQheLIw4hvlmlMZ7qX+Q/QmUbXtGRPKRXkAJf6Cu+xg0kmleVVJR/BvIybU8ciivRG9epnnCuaQ6/JvbN2e03grtPEmRNXFXyCYP6SDx/YglOPAjdbR/cXia8Cb43WVFQyAxu/2L9TuX6CIQtKGyjIl5f5CN7q1LSdB+Zu1ySXRyHHaZrwUhNditFG0+WO3zqe04AADZjV2GTNCs4mNbDFFH2mav937y48eg30eiOhikVRkYqMluEi/4nW3tfDAH3zWr+wW689UKhyXERi90WWDEmAG2xvpZ6QGr16gAre5ETeOAXEr0KrlzIQRterS2eoMkGv4Tw2QRvHslZXKaweqZ2LajUT8uXlOwbufKXnljgZRgegkBF7REDzkZQbMdovnpirecD/n5v6Mp2+yjooumC3XEu7w1j6PJAdA9mKAhTAel+W+tJYu3sVq0wG0dunjJV0qMlLRoAaecq4l0AXB6enCFvQEIl8sCErReDYRDKAwV9e7kzNfmycVEEp04W266keHLmRtswDGHFm739jn66IZfQoXF5iranMxmdC7hhEJ19q60/q+Yj7RMJ4h+1YUswoKG2dtvf1PKoNI1I4Z05NDTGtEN+nU/qHCC7e/WViJSlg8Ug=
url: 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
Add Argo CD sealed secrets for OIDC and repository access Created three SealedSecrets for Argo CD integration: - argocd-oidc-secret: Pocket ID OIDC client credentials - repo-stack-basicstack-de: SSH deploy key for stack repository - repo-basicstack-org: SSH deploy key for basicstack.org repository Repository secrets include argocd.argoproj.io/secret-type label for automatic Argo CD discovery. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-11 17:26:32 +00:00
template:
metadata:
creationTimestamp: null
labels:
argocd.argoproj.io/secret-type: repository
name: repo-basicstack-org
Fix Argo CD sealed secrets namespace mismatch Re-sealed the three Argo CD secrets with namespace: argocd instead of namespace: paperclip to match the kustomization.yaml deployment target. The sealed-secrets controller was failing to unseal these because they were encrypted for the 'paperclip' namespace but Kustomize was deploying them to the 'argocd' namespace. Sealed secrets use strict scope by default, so namespace/name must match exactly. Fixed files: - apps/argocd/argocd-oidc-secret-sealed.yaml - apps/argocd/repo-basicstack-org-secret-sealed.yaml - apps/argocd/repo-stack-basicstack-de-secret-sealed.yaml Root cause: DEV-284 investigation revealed controller error logs showing "no key could decrypt secret" for all three Argo CD sealed secrets. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-12 10:11:39 +00:00
namespace: argocd
type: Opaque
Reference in a new issue Copy permalink