feat(sealed-secrets): add multiple SealedSecrets for various services and configurations

.gitignore

@@ -105,7 +105,6 @@ fabric.properties
 ### Sealed Secrets ###
 /scripts/sealed-key.yaml
 
-# Unsealed Secret files (templates for kubeseal)
+# All secrets are SealedSecrets — safe to commit
-secrets/**
+# kustomization.yaml and *.yaml are tracked; raw *.yml files are not
 secrets/**/*.yml
-!secrets/kustomization.yaml

secrets/gitea/argocd-gitops-repo-secret.yaml

@@ -0,0 +1,19 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: argocd-gitops-repo
+  namespace: argocd
+spec:
+  encryptedData:
+    insecure: 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
+    sshPrivateKey: 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
+    type: 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
+    url: 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
+  template:
+    metadata:
+      labels:
+        argocd.argoproj.io/secret-type: repository
+      name: argocd-gitops-repo
+      namespace: argocd
+    type: Opaque

secrets/gitea/gitea-gitops-secret.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: gitea
+  namespace: orchestration-kargo
+spec:
+  encryptedData:
+    password: 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
+    repoURL: AgCSjhi6EQ7N0MPLj233SXNdtRfonlHTBkziGTVd11p4/lFOrFAuWjoZoOkT/pl5M8GkRFxmV5W+4M1o9zqwx8nOjmUx6dRvwBPiO+uUJ32eO9YjiX/A7tjoXITCgBV0Bt2Y20jqTpcLuqL0FDEXJAROvEiVrjGsD4ngGTYfbhw6mZuY0ccMCceLS3C4ZpF7xjFLmI2x+TlPuhjpu4cdiPVuXB+zn2K/vPYaozfnEV432gSlJkW4hwLBht+Ezcm2wUXyKfFQyaZfpnSAOMhVkOELF0KlyniLtnhT/JnoY87GG04ICWSIM741yQlGrau4RWDkNeXUdMVyFNfWGPik851exDdwDpGoURhahR8JFu+pUyjqGzOrJmAWjUlKqjPhg0YywOli1a2eQR+A4BYYjmaHhR3U3eDkZZbGgF+woQGpBZOeHdrr4Nh1ThXEwobXwnBYVhYPS/gz1RmLMQ0R8p5bwNQR+giu21KSVMLx/REThr3Cx/B+3oyYuX01oAk9UN1YST/i1uWjR05bJcBsYwcQhoKOL4UYq5uk/ND2RV55YKz1zP5RbdLQNR3AuoEWBKj6/E3mwog9KP3Z3daMhqH/Fooo/wlC6zFXonSyKyXIQcep0aWK8GstZIrxQAtQUbwEnPZoPi+WWpN/Li+TmAl7FovW3jwOc+ypCxQu79XCz+0MtUweFn9q5wT3q6ResZ4wNUjhD3Jhvue+EvOSwCBvKoTJaoZos+aUY5bj2RWoYXowKSzt2BvgI8QOPkClwXWB
+    username: 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
+  template:
+    metadata:
+      labels:
+        kargo.akuity.io/cred-type: git
+      name: gitea
+      namespace: orchestration-kargo
+    type: Opaque

secrets/github/git-kargo-secret.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: git-kargo-secret
+  namespace: orchestration-kargo
+spec:
+  encryptedData:
+    password: AgAJQ4YIcdC4jE+4NOjxGIf+V3e9LJdVjRfg2qhv9F0PVcjLaFNvwMt0X/0Fs01I5MDHEASGCkD0RanjVv612FDd/jp/W2cMleXkcDifSeRs2xKb2zmEvXZ6pq23JlFdfvN82KA5wQPq4Z7ruW7gJ8kP+kK2549Wt9bjAO4TUCp4GBMZTX3dDnFuZNIlSHzXHYtFB7Ru0lwtYcq4/7yKz85S4rt+OP+V+bLpdbCyxuNH0U5HZ3FWhVuoD/n8YYWiqaPaTuFWibF8PsnKyBO/q1jESlJLquV2Dg/f6mdN6NEjmNjLVGzgIkhx00r/He77BdL3LTx5kiDVnGGIf02NK6HqGSpev/jJYGB3ZRo9f+WiUkSA7GxLNZqfOdioMP7rtS+pG9pAzdBjfh7pBZW6u0tBNLGkHo/FB8X0Qsdby1PavfgWL++8W+iHtyj6LSKl2n/vP0SfK5mJNHuMjlz/d90g5cj8JPp9rs2ry+/Ini5gxCEurz73iW8NXqUKYo5/u9Hg1M5NHo5Rw54if9gAnxxhlo0QHsHtIuHS82wahVnNfkUOdQ+SuQDnNubS7GZNQNUhEz+ZC8yypgvzLMFPEmjMxFMfEbaEELqvZBVHDrVlKXtuY+It5TZK1I4DB1Ee7GqOmzp/ocd5lJZjC6x15o9lRkuuvnTBUQA3wBsipCTeIFwk00KTDWpZRtzu1pecwcceHaK1IQXEYBINmk5PrOpxBfiuEF+sZIijgPL8/0UiJkJY1s/SdVNx
+    repoURL: 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
+    username: AgBPz7XODpnsuX2jYBvdtEifn4lbKkDFRBnPSwWXyd6HygDioEexxLEogx3hK99KxmwX7TSa9cujr0GLr02nVmaa47XmHL2cj5DZhRtzJe58gyPWwUB3BhEteoUQqC8MOHQT7SKrDlhYC9I4ltjq8PWheKnSSQuuYowUjjIRazhx+I98+5rgi1sH680v9fBcQS9KQCzgEkUfdSJS3AnlXxK7LhthkJcjWR/lnrqya7z2sDwlLuIgLphIUTxuaxgGKfLvAUbnjRsmeFmzRRhRq2ke4/7nf36ja3CBSeoaENhjucMU7FsyaEDsYlAh//epqKVNI0kpdeuGDkBH1xHbQmuz9ftmZjpikY2gidcTVHmNxjne5+PjKalcZrdUV6DPIXlIXMpFxPZTeTWiGczk1oqJDy+SH8cn6VsoaXvZ2h5mcIZnnpozl7MQITjFw9zk+PWiOE+iahCEo0VbXqT/PlLwB+fzjP1FgmJJKQBjBq4PQOWoi2prblGq1zPl/6TJWjPyUiYhxbKW0KrAMWW9PB0uaYC20Qxc+43qei9eLD2cEjTTcLyV+ygxb1/niBpjmKMBgtPmzdR9AwOPHRM6mqUzpwt+qkPN2TbaytHuEt0NCrCgXES0DHc3gyCfZQbbVMqabzsBX0YfqokasM7HlLeNVcjK6NNlvHjYq0Mo4xJfa+axf3jx+ns6IH8VT6cID8wMbRyhctHbEC8=
+  template:
+    metadata:
+      labels:
+        kargo.akuity.io/cred-type: helm
+      name: git-kargo-secret
+      namespace: orchestration-kargo
+    type: Opaque

secrets/github/git-nowchess-secret.yaml

@@ -0,0 +1,19 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: git-kargo-secret
+  namespace: orchestration-kargo
+spec:
+  encryptedData:
+    password: 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
+    repoURL: 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
+    repoURLIsRegex: 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
+    username: AgCSKMLMJfl3zVeAMt4A4gXa/c/2odA34dIRWYwn0tPKGntNBa/WIsEQdbceHowPMQN/8l08MhzrIBwgIeUMeCyKS1oAY6eUz1k6pLX4XIw4W1L5vU2WDYx2JYY8iKvUSKI58crLVQ/iDErpkNLvuIvFR0wNSnIuhrLPSsY7y4XRdDZXdHAzH4fTEPVOZS62UQN3ai4bWpA1+l/M1O8xRoi2rPuzC8QXtPMPPx0LdmIIjquqmRsyfsRiMpPK01ZsEdwv/O9F3IlZBgVRoAQhm57Agv7hEZtev+JIphNw4PnTNzOTDWaLPVHkzevCzeZk9R/VGGsvkHY4so2atwmM8nbZpwIjQpSsftPlA4QGv/J7y7pdAqxjA3TX5KcYjP/UwRziaEQhNXMggi87C0FH9hazItYzvg0m+FfGXMDl2cWRueHhkRdDQsALwsTtpK5HHyAyV5TwmZd8p4Eeu0iPXdGt37sYtphBdL+BHYAPJCXg4tzOvBCFqhGmcBi4eCCNbUjkE/vMuMXVQIoq6NXR4AZ2jlRxaIie5CRNE/aDJX56sIfOb9OGV6ytgsHUjmh4fQf85rtqjbbZyDHLa9JawSdoI1AU+OtXZwHp22onqKuT/zqwWRUj0x38KqeT7M5EXoGHQwGhHQvGqR8CT1jvuY14AQDflBu0RMV6tahbIsF3GQm+AVx50RMK8rxobPeYG6eyYlioEsD4woM=
+  template:
+    metadata:
+      labels:
+        kargo.akuity.io/cred-type: image
+      name: git-kargo-secret
+      namespace: orchestration-kargo
+    type: Opaque

secrets/github/git-pull-secret.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: github
+  namespace: redis
+spec:
+  encryptedData:
+    .dockerconfigjson: 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
+  template:
+    metadata:
+      name: github
+      namespace: redis
+    type: kubernetes.io/dockerconfigjson

secrets/kargo/discord-webhook-secret.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: discord-webhook
+  namespace: nowchess-kargo
+spec:
+  encryptedData:
+    webhook: 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
+  template:
+    metadata:
+      name: discord-webhook
+      namespace: nowchess-kargo
+    type: Opaque

secrets/kargo/kargo-admin-password-secret.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: kargo-admin-password
+  namespace: kube-devops
+spec:
+  encryptedData:
+    ADMIN_ACCOUNT_PASSWORD_HASH: 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
+    ADMIN_ACCOUNT_TOKEN_SIGNING_KEY: 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
+  template:
+    metadata:
+      name: kargo-admin-password
+      namespace: kube-devops
+    type: Opaque

secrets/nowchess/eu-central-1-prod/ghcr-pull-secret.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: ghcr-pull-secret
+  namespace: nowchess
+spec:
+  encryptedData:
+    .dockerconfigjson: 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
+  template:
+    metadata:
+      name: ghcr-pull-secret
+      namespace: nowchess
+    type: kubernetes.io/dockerconfigjson

secrets/nowchess/eu-central-1-prod/ncs-db-secrets.yaml

@@ -0,0 +1,19 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: ncs-db-secrets
+  namespace: nowchess
+spec:
+  encryptedData:
+    ACCOUNT_DB_PASSWORD: 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
+    ACCOUNT_DB_URL: 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
+    ACCOUNT_DB_USER: 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
+    STORE_DB_PASSWORD: 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
+    STORE_DB_URL: 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
+    STORE_DB_USER: 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
+  template:
+    metadata:
+      name: ncs-db-secrets
+      namespace: nowchess
+    type: Opaque

secrets/nowchess/eu-central-1-prod/ncs-internal-secret.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: ncs-internal-secret
+  namespace: nowchess
+spec:
+  encryptedData:
+    INTERNAL_SECRET: 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
+  template:
+    metadata:
+      name: ncs-internal-secret
+      namespace: nowchess
+    type: Opaque

secrets/nowchess/eu-central-1-prod/ncs-jwt-keys.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: ncs-jwt-keys
+  namespace: nowchess
+spec:
+  encryptedData:
+    private.pem: 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
+    public.pem: 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
+  template:
+    metadata:
+      name: ncs-jwt-keys
+      namespace: nowchess
+    type: Opaque

secrets/nowchess/kargo/github-image-secret.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: gitea
+  namespace: nowchess-kargo
+spec:
+  encryptedData:
+    password: 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
+    repoURL: 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
+    username: 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
+  template:
+    metadata:
+      labels:
+        kargo.akuity.io/cred-type: git
+      name: gitea
+      namespace: nowchess-kargo
+    type: Opaque