d5e8c28a6a
This commit converts all application secrets to SealedSecrets, preventing plaintext secrets from being stored in git. Changes: - Added .gitignore to prevent future plaintext secret commits - Created 20 SealedSecret manifests across 8 applications: * Stalwart (4 secrets): admin credentials, OAuth proxy, OIDC, S3 backup * Directus (5 secrets): admin, agent token, app secrets, DB, OIDC * Paperclip (4 secrets): main secrets, auth, OIDC, session * Forgejo (2 secrets): postgres, backup * BookStack (2 secrets): OIDC, MySQL * Passbolt (2 secrets): MariaDB, app secrets * Pocket ID (1 secret) - Removed hardcoded secrets from 6 stalwart deployment files - Replaced plaintext credentials with references to sealed secrets All sealed secrets have been applied to the cluster and services verified to be running correctly. Related: DEV-203 Co-Authored-By: Paperclip <noreply@paperclip.ing>
16 lines
1.1 KiB
YAML
16 lines
1.1 KiB
YAML
---
|
|
apiVersion: bitnami.com/v1alpha1
|
|
kind: SealedSecret
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: directus-agent-token
|
|
namespace: directus
|
|
spec:
|
|
encryptedData:
|
|
token: AgCn/l/zGHbc3Lu1GGWHHCapiRjkt1kYiwScEA/3GZL67AVjsEbFUXQucP65wfeYCli1KtHxBPGpH6M5zGZlA/HlRTWucEVdNIxWR62Q54916pKSaa5E53NcFrkWK/U8ANaLGmBy4lI7NHH8MKo5RWmX8lWKuRzKxhNsG5EvDUBTAt1OlBSAu9ico6Mr8JyCdBbr19pycfLeXrEHe2m6FSzCpiIuldtqqXZhegbwRQC5ma0anu+SQtRlXN9UKpvoH1jOdkWRmIcUOfGLgfxkV3DCeWqNYPur04nD7na+Bod8eZF1fLMJs1r2I4yc0G8/E7VTz1LUJqInn+ToF4yrm7ESL7FYu+N1VUdF2CNjd8vtfux3LRJxa7O7souUeA0zCY+D6CsqVr1YBF9h+CS4e5ecWoK/8hDxQZeBrC/4rUXy1dY2KZabo7UfL5LI9OA+o8Fw2S8MY/TF4RZ4L0vUbeaELTAPPj5LxwNm0k6IyLno7VAwkNCIZq2FT4dP/jZ7x9ExewqsQ/zf/u+hp1tE4YxUCRzEn6CzhVk0TkQOIULEdioKgF0ExICHunqigUIk/t+D2xLZATCDNdfnWsF5VCOQu71uXvMhCIR5hLfRe1XiXSdgjQ5KvqBp5hUXoBTs5R0LHauzNQHe2f9du+h7srAPsBRxV+kKkKRIoTAXrrb3uC1NWkaCYwGPl/c5x9rg7PwXMyUDb/G+a9OQQ8yZWnt3VP1ztRtRlolR2g79AsCBzCkFv1tbxjSEpPH0/g==
|
|
template:
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: directus-agent-token
|
|
namespace: directus
|
|
type: Opaque
|