feat(secrets): add sealed secret for GHCR image credentials

This commit is contained in:
Janis Eccarius
2026-05-30 15:08:03 +02:00
parent c530ee493b
commit 821c7c256b
4 changed files with 24 additions and 0 deletions
BIN
View File
Binary file not shown.
+5
View File
@@ -0,0 +1,5 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- statefulset.yaml
- service.yaml
+1
View File
@@ -16,6 +16,7 @@ resources:
- nowchess/eu-central-1-prod/ncs-db-secrets.yaml
- nowchess/eu-central-1-prod/ncs-internal-secret.yaml
- nowchess/kargo/git-secret.yaml
- nowchess/kargo/ghcr-image-secret.yaml
- nowchess/kargo/github-image-secret.yaml
- nowchess/kargo/remotek6-certs.yaml
- nowchess/staging/remotek6-certs.yaml
@@ -0,0 +1,18 @@
---
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
name: ghcr-image-secret
namespace: nowchess-kargo
spec:
encryptedData:
password: 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
repoURL: AgB586kNBDRMS58hjlheH5AG3NB12Vs1tTPYudvlIxePggmIwfuj5mOHKhIemP+q/gbdhIPOMLWmwW+N20dxIEw/i/837+1Jr0KbUjU+fiAtgQxOf2jQzW0zsWwDKf3UjLujfIG/yaVipDKz0XY6+r5KJvzDYICZildk8FyEHjhiANAyH1j92NRs5WOtZJfiIo+guz3Ukn+OYd/72Nc43rSGugDUZxoW4lECJvxgH/JtYq4LKm20aK2s0UcpZSnJGCqQmONMi8HTTMT8JIf3fkd8zZgT6ETFZfifLWNdu4X5uR+71+uwhh738zTS4akmReeoZE+IdDl1/xxywhoTee0DE+T4Xiklsmydfp2IP5K3GiP/oZ9x2k7frSxyuani8CYMm28VrBycTTJYQI92rmh6EMap5OFWkYw5rZRyiRZ31BBAPmlzXhvhBHBhXuXLE2zRQOEfxgbsqoC/i0qgy6k/aOCiiSX27Fnum9O2ZDz+3QYbmCiq81ePDcNMiUA0xmCZmmxXqQcHAMTVIBTgiwukccu6mxKtfq8RuFHDlZLDZQ+0+Epjr02b7mf4Zl1UXbMGasRfusj+w05aSb0jo942a4NySmfHq1lIAhgr4+WfBL2CYwsBdTXN+MjeZQSJ7hjetVzb5RyBlkavhMtTnuF309hQPaGuIOZEe8Pxx0F157aneygZhqaf8jps8KZrCrAE409CWDiaLUHFAE/ATQzFaNdABxFBobKHabuhSByy4nj+eYVPvItf3XE=
repoURLIsRegex: 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
username: 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
template:
metadata:
labels:
kargo.akuity.io/cred-type: image
name: ghcr-image-secret
namespace: nowchess-kargo