d5e8c28a6a
This commit converts all application secrets to SealedSecrets, preventing plaintext secrets from being stored in git. Changes: - Added .gitignore to prevent future plaintext secret commits - Created 20 SealedSecret manifests across 8 applications: * Stalwart (4 secrets): admin credentials, OAuth proxy, OIDC, S3 backup * Directus (5 secrets): admin, agent token, app secrets, DB, OIDC * Paperclip (4 secrets): main secrets, auth, OIDC, session * Forgejo (2 secrets): postgres, backup * BookStack (2 secrets): OIDC, MySQL * Passbolt (2 secrets): MariaDB, app secrets * Pocket ID (1 secret) - Removed hardcoded secrets from 6 stalwart deployment files - Replaced plaintext credentials with references to sealed secrets All sealed secrets have been applied to the cluster and services verified to be running correctly. Related: DEV-203 Co-Authored-By: Paperclip <noreply@paperclip.ing>
18 lines
2.5 KiB
YAML
18 lines
2.5 KiB
YAML
---
|
|
apiVersion: bitnami.com/v1alpha1
|
|
kind: SealedSecret
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: forgejo-postgres-secret
|
|
namespace: forgejo
|
|
spec:
|
|
encryptedData:
|
|
POSTGRES_DB: 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
|
|
POSTGRES_PASSWORD: AgAuKTm3lK1/H5acJr9euOsHtcxL0yspaNU8tfBsTU4rlOlaZa8L5ICuzY1JRKcA/JOcj8b/2EuAj/hejkMZmFpU33p+ihm2NbOOij5KT1WSf6vAg/dmjTeCkCX3BNBzevJRenNAST3CgkzmB1/Z1ZDO2Ryhy98Ar6Q8fOXWA2Y5EES1LubZVel4gk28lUqeh+KuHbc2a6X2XBKZh6QUs/V1Pvp0UJkWpx5NIsds32+d+yaBT7+zY5ESS0guXg87PUhoQRRYpsTiMN2hB4WQUyXBb9C9oR8Hnd6Iz/B40lzo+cVB3Y/YSyXqrH9K4mLdhBk2LPVIx4EzJidsidz3XQe6La0FwuelzVI3VV5iuo2ANXxnHvh3pEe++Fs57Q816s6mBEPcdyQNqVUj/slXax7gzbmVTvRM97O/hO+JvVt8yd2+/YrHJdTcTr3qWlMMky6Rrmto+rehlJ736Dwv22y+mOb8KAWuH59A873UPmvNV8KnkpU2m71grhT6jtd6fvJ8HsmilP6l5MR477MhAyZk/5P4XQ0ubRPpy6/Z81VbdmFD4KO2NC47my8R6HcCwR9bUnO4ubrz/SRcIbRqXzoZZFgLM/grb5SxGStCygnA1cYomX2J3L1zl1BjwZjnbu23iRZUzdgP2xb9O2SChfwKawlCam53tJ3vGMNFNnazuFWxoW6ggsDK31M9BwRNirtHpAG8+OWGpIHFnAQGzdTw7Qjl3Jy+qFoqyMRPG53vw4vehvydYoyF/BGbzQ==
|
|
POSTGRES_USER: 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
|
|
template:
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: forgejo-postgres-secret
|
|
namespace: forgejo
|
|
type: Opaque
|