d5e8c28a6a
This commit converts all application secrets to SealedSecrets, preventing plaintext secrets from being stored in git. Changes: - Added .gitignore to prevent future plaintext secret commits - Created 20 SealedSecret manifests across 8 applications: * Stalwart (4 secrets): admin credentials, OAuth proxy, OIDC, S3 backup * Directus (5 secrets): admin, agent token, app secrets, DB, OIDC * Paperclip (4 secrets): main secrets, auth, OIDC, session * Forgejo (2 secrets): postgres, backup * BookStack (2 secrets): OIDC, MySQL * Passbolt (2 secrets): MariaDB, app secrets * Pocket ID (1 secret) - Removed hardcoded secrets from 6 stalwart deployment files - Replaced plaintext credentials with references to sealed secrets All sealed secrets have been applied to the cluster and services verified to be running correctly. Related: DEV-203 Co-Authored-By: Paperclip <noreply@paperclip.ing>
17 lines
1.8 KiB
YAML
17 lines
1.8 KiB
YAML
---
|
|
apiVersion: bitnami.com/v1alpha1
|
|
kind: SealedSecret
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: directus-admin-credentials
|
|
namespace: directus
|
|
spec:
|
|
encryptedData:
|
|
admin-email: AgA4CbWzOUz0lGaRBRsJ9+jg3RZS3mMpZNNjwxlFfZCmCinr+5S+v+fWo3cCusLc1CYw56AywZEmGrhHcDa1+TdcgwuF8uOZYmOKaZpuwlmdRHjns38ST7RjJ7BbgYKjf10NUHVHFEn+lVkA/b3gvKzH5QikdEV3+LUq8WlVB3hEGKOSh+pZdt9B2WdEiVU8K48eUaDKDtMbK4KeXml3ci4KgCFprx7RFWzfLeosgxLAA6N84YqNLQQRLGlCbp2wbZQslvCYY4NZUiIQAlRvZoOHVpcCujJK6YdBSU2txbY5jyx09ypyNgcXAO+/wsdGlpPyDwpnDzvvleO1N2HpGKl+Ye81xvMpbvk8lio2+LrYU4wTtnLWpOGwYOjOMgXlRVxjxEym/jUdDP3BBGkUs18iGRw+HnMba/VbkbVFtwqYd+UFzwDcCwVO4h9N7jP5/z+DzZ2FjQqBIV8gv1RkKD1zD1yg/dB+X36A7swo87BdWmBQSfZ0rQpvMwkepm9oUZGLVRM04T6yTSnfkbZlg64hSIMwukXIc1monyEFNiWj1y6Z6BxiMJpQbjCBXrsmtjvo4V9UJZ6M7QGc0JsWLX4w3JKCObWQr3v89ee8Lydlea2QBw0n5k5YbW/fRzLaSmEu33pCu0szFZdIRo7ka8U86wdNVkzKYMGi+StykcfMND/v0UU110BMxfZyFTYafnmW9DhHvGOeA7me/pZ3/bw0OoRz
|
|
admin-password: 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
|
|
template:
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: directus-admin-credentials
|
|
namespace: directus
|
|
type: Opaque
|