Adds SealedSecret velero-s3-credentials in namespace velero, holding the dedicated velero-prod Hetzner Object Storage access/secret key (scoped only to the basicstack-velero bucket). Sealed on cp-1 via /root/seal-velero-s3-credentials.sh with the sealed-secrets-controller public cert; plaintext never left the host. Only the in-cluster controller can decrypt. Co-Authored-By: Paperclip <noreply@paperclip.ing> |
||
|---|---|---|
| .. | ||
| velero-repo-credentials-sealed.yaml | ||
| velero-s3-credentials-sealed.yaml | ||