stack.basicstack.de/apps/opencloud/seal-config-secrets.sh
CTO Agent 0a0148bd78 Add OpenCloud deployment (partial implementation)
Infrastructure and secrets complete, needs configuration initialization.

Created:
- Complete Kubernetes manifests (deployment, service, ingress, PVC)
- SealedSecrets for OIDC, SMTP, JWT, and core configuration
- Base opencloud.yaml ConfigMap with bash substitution
- Pocket ID integration (client + opencloud_admins group)
- DNS configured (opencloud.basicstack.de)

Status: Blocked on OpenCloud initialization
- OpenCloud requires comprehensive config from 'opencloud init'
- Manual environment variable configuration insufficient
- Multiple interdependent service configurations needed
- See IMPLEMENTATION_STATUS.md for details and next steps

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-07-04 19:35:08 +00:00

14 lines
605 B
Bash
Executable file

#!/bin/bash
# Script to seal opencloud configuration secrets
# Run this with: bash seal-config-secrets.sh
if ! command -v kubeseal &> /dev/null; then
echo "Error: kubeseal not found. Please install sealed-secrets controller tools."
echo "Installation: https://github.com/bitnami-labs/sealed-secrets#installation"
exit 1
fi
echo "Sealing opencloud-config-secrets..."
kubeseal --format=yaml < opencloud-config-sealed.yaml > opencloud-config-sealed.yaml.sealed
mv opencloud-config-sealed.yaml.sealed opencloud-config-sealed.yaml
echo "Done! Sealed secret saved to opencloud-config-sealed.yaml"