stack.basicstack.de/apps/velero
CTO Agent f318719c59 velero(secrets): seal dedicated Hetzner OS S3 credential (DEV-570)
Adds SealedSecret velero-s3-credentials in namespace velero, holding
the dedicated velero-prod Hetzner Object Storage access/secret key
(scoped only to the basicstack-velero bucket).

Sealed on cp-1 via /root/seal-velero-s3-credentials.sh with the
sealed-secrets-controller public cert; plaintext never left the host.
Only the in-cluster controller can decrypt.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-12 17:00:43 +00:00
..
velero-repo-credentials-sealed.yaml velero(secrets): seal Kopia repo password for velero namespace 2026-09-12 16:22:22 +00:00
velero-s3-credentials-sealed.yaml velero(secrets): seal dedicated Hetzner OS S3 credential (DEV-570) 2026-09-12 17:00:43 +00:00