From 3e6f09720ef8e691134b900e64c33c6b3e7faea6 Mon Sep 17 00:00:00 2001 From: Jose Henrique Date: Wed, 2 Sep 2026 19:52:19 -0300 Subject: [PATCH] change in secrets --- secrets/archivebox.yaml | 24 ++++++++++++++++++++ secrets/radarr.yaml | 48 --------------------------------------- secrets/recommender.yaml | 27 ---------------------- secrets/renovate-bot.yaml | 27 ++++++++++++++++++++++ secrets/sonarr.yaml | 42 ---------------------------------- 5 files changed, 51 insertions(+), 117 deletions(-) create mode 100644 secrets/archivebox.yaml delete mode 100644 secrets/radarr.yaml delete mode 100644 secrets/recommender.yaml create mode 100644 secrets/renovate-bot.yaml delete mode 100644 secrets/sonarr.yaml diff --git a/secrets/archivebox.yaml b/secrets/archivebox.yaml new file mode 100644 index 0000000..99dcaf5 --- /dev/null +++ b/secrets/archivebox.yaml @@ -0,0 +1,24 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: { name: archivebox-password, namespace: default } +spec: + refreshInterval: 1h + target: + name: archivebox-password + deletionPolicy: Retain + template: + type: Opaque + data: + username: "{{ .username }}" + password: "{{ .password }}" + data: + - secretKey: username + remoteRef: + { key: 6b4ca371-dcd4-4e31-aebe-8e5ea48b1fb9, property: username } + sourceRef: + { storeRef: { name: bitwarden-login, kind: ClusterSecretStore } } + - secretKey: password + remoteRef: + { key: 6b4ca371-dcd4-4e31-aebe-8e5ea48b1fb9, property: password } + sourceRef: + { storeRef: { name: bitwarden-login, kind: ClusterSecretStore } } diff --git a/secrets/radarr.yaml b/secrets/radarr.yaml deleted file mode 100644 index d9f6079..0000000 --- a/secrets/radarr.yaml +++ /dev/null @@ -1,48 +0,0 @@ -apiVersion: external-secrets.io/v1 -kind: ExternalSecret -metadata: { name: radarr, namespace: media } -spec: - refreshInterval: 1h - target: - name: radarr-secret - deletionPolicy: Retain - template: - type: Opaque - data: - Radarr__Postgres__User: "{{ .Radarr__Postgres__User }}" - Radarr__Postgres__Password: "{{ .Radarr__Postgres__Password }}" - Radarr__Postgres__Host: "{{ .Radarr__Postgres__Host }}" - Radarr__Postgres__MainDb: "{{ .Radarr__Postgres__MainDb }}" - data: - - secretKey: Radarr__Postgres__User - remoteRef: - { - key: ab723b65-3ec8-469c-b01d-67a6e3049023, - property: username, - } - sourceRef: - { storeRef: { name: bitwarden-login, kind: ClusterSecretStore } } - - secretKey: Radarr__Postgres__Password - remoteRef: - { - key: ab723b65-3ec8-469c-b01d-67a6e3049023, - property: password, - } - sourceRef: - { storeRef: { name: bitwarden-login, kind: ClusterSecretStore } } - - secretKey: Radarr__Postgres__Host - remoteRef: - { - key: ab723b65-3ec8-469c-b01d-67a6e3049023, - property: Radarr__Postgres__Host, - } - sourceRef: - { storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } } - - secretKey: Radarr__Postgres__MainDb - remoteRef: - { - key: ab723b65-3ec8-469c-b01d-67a6e3049023, - property: Radarr__Postgres__MainDb, - } - sourceRef: - { storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } } diff --git a/secrets/recommender.yaml b/secrets/recommender.yaml deleted file mode 100644 index 3812d84..0000000 --- a/secrets/recommender.yaml +++ /dev/null @@ -1,27 +0,0 @@ -apiVersion: external-secrets.io/v1 -kind: ExternalSecret -metadata: { name: recommender, namespace: media } -spec: - refreshInterval: 1h - target: - name: recommender-secrets - deletionPolicy: Retain - template: - type: Opaque - data: - OPENAI_API_KEY: "{{ .OPENAI_API_KEY }}" - DATABASE_URL: "{{ .DATABASE_URL }}" - data: - - secretKey: OPENAI_API_KEY - remoteRef: - { - key: 5079ef6f-3d1d-4522-b22c-6dd5f1c19acd, - property: OPENAI_API_KEY, - } - sourceRef: - { storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } } - - secretKey: DATABASE_URL - remoteRef: - { key: 5079ef6f-3d1d-4522-b22c-6dd5f1c19acd, property: DATABASE_URL } - sourceRef: - { storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } } diff --git a/secrets/renovate-bot.yaml b/secrets/renovate-bot.yaml new file mode 100644 index 0000000..6335c4f --- /dev/null +++ b/secrets/renovate-bot.yaml @@ -0,0 +1,27 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: { name: renovate-bot, namespace: cronjobs } +spec: + refreshInterval: 1h + target: + name: renovate-bot + deletionPolicy: Retain + template: + type: Opaque + data: + RENOVATE_GITHUB_COM_TOKEN: "{{ .RENOVATE_GITHUB_COM_TOKEN }}" + RENOVATE_TOKEN: "{{ .RENOVATE_TOKEN }}" + data: + - secretKey: RENOVATE_GITHUB_COM_TOKEN + remoteRef: + { + key: 25b1f5c9-0a2b-438e-a4c6-23ea1d58e2de, + property: RENOVATE_GITHUB_COM_TOKEN, + } + sourceRef: + { storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } } + - secretKey: RENOVATE_TOKEN + remoteRef: + { key: 25b1f5c9-0a2b-438e-a4c6-23ea1d58e2de, property: RENOVATE_TOKEN } + sourceRef: + { storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } } diff --git a/secrets/sonarr.yaml b/secrets/sonarr.yaml deleted file mode 100644 index 3d87606..0000000 --- a/secrets/sonarr.yaml +++ /dev/null @@ -1,42 +0,0 @@ -apiVersion: external-secrets.io/v1 -kind: ExternalSecret -metadata: { name: sonarr, namespace: media } -spec: - refreshInterval: 1h - target: - name: sonarr-secret - deletionPolicy: Retain - template: - type: Opaque - data: - Sonarr__Postgres__User: "{{ .Sonarr__Postgres__User }}" - Sonarr__Postgres__Password: "{{ .Sonarr__Postgres__Password }}" - Sonarr__Postgres__Host: "{{ .Sonarr__Postgres__Host }}" - Sonarr__Postgres__MainDb: "{{ .Sonarr__Postgres__MainDb }}" - data: - - secretKey: Sonarr__Postgres__User - remoteRef: - { key: 2c5b6d27-971f-4876-b10d-db400dfde7b2, property: username } - sourceRef: - { storeRef: { name: bitwarden-login, kind: ClusterSecretStore } } - - secretKey: Sonarr__Postgres__Password - remoteRef: - { key: 2c5b6d27-971f-4876-b10d-db400dfde7b2, property: password } - sourceRef: - { storeRef: { name: bitwarden-login, kind: ClusterSecretStore } } - - secretKey: Sonarr__Postgres__Host - remoteRef: - { - key: 2c5b6d27-971f-4876-b10d-db400dfde7b2, - property: Sonarr__Postgres__Host, - } - sourceRef: - { storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } } - - secretKey: Sonarr__Postgres__MainDb - remoteRef: - { - key: 2c5b6d27-971f-4876-b10d-db400dfde7b2, - property: Sonarr__Postgres__MainDb, - } - sourceRef: - { storeRef: { name: bitwarden-fields, kind: ClusterSecretStore } }