feat(secrets): migrate secrets to SealedSecrets format and update configurations

secrets/kustomization.yaml

@@ -12,9 +12,9 @@ resources:
   - nowchess/staging/ncs-jwt-keys.yaml
   - nowchess/staging/ncs-db-secrets.yaml
   - nowchess/staging/ncs-internal-secret.yaml
-  - nowchess/prod/ghcr-pull-secret.yaml
-  - nowchess/prod/ncs-jwt-keys.yaml
-  - nowchess/prod/ncs-db-secrets.yaml
-  - nowchess/prod/ncs-internal-secret.yaml
+  - nowchess/eu-central-1-prod/ghcr-pull-secret.yaml
+  - nowchess/eu-central-1-prod/ncs-jwt-keys.yaml
+  - nowchess/eu-central-1-prod/ncs-db-secrets.yaml
+  - nowchess/eu-central-1-prod/ncs-internal-secret.yaml
   - nowchess/kargo/git-secret.yaml
   - nowchess/kargo/gitea-secret.yaml

secrets/nowchess/kargo/git-secret.yaml

@@ -1,13 +1,19 @@
-apiVersion: v1
-kind: Secret
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
 metadata:
   name: git-kargo-secret
   namespace: nowchess-kargo
-  labels:
-    kargo.akuity.io/cred-type: git
-type: Opaque
-stringData:
-  repoURL: https://git.janis-eccarius.de/NowChess/Gitops.git
-  repoURLIsRegex: "false"
-  username: ""
-  password: ""
+spec:
+  encryptedData:
+    password: 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
+    repoURL: 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
+    repoURLIsRegex: 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
+    username: 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
+  template:
+    metadata:
+      labels:
+        kargo.akuity.io/cred-type: git
+      name: git-kargo-secret
+      namespace: nowchess-kargo
+    type: Opaque

secrets/nowchess/kargo/gitea-secret.yaml

@@ -1,12 +1,18 @@
-apiVersion: v1
-kind: Secret
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
 metadata:
   name: gitea
   namespace: nowchess-kargo
-  labels:
-    kargo.akuity.io/cred-type: git
-type: Opaque
-stringData:
-  repoURL: https://git.janis-eccarius.de/NowChess/Gitops.git
-  username: ""
-  password: ""
+spec:
+  encryptedData:
+    password: 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
+    repoURL: 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
+    username: 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
+  template:
+    metadata:
+      labels:
+        kargo.akuity.io/cred-type: git
+      name: gitea
+      namespace: nowchess-kargo
+    type: Opaque

secrets/nowchess/prod/ghcr-pull-secret.yaml

@@ -1,8 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: ghcr-pull-secret
-  namespace: nowchess
-type: kubernetes.io/dockerconfigjson
-data:
-  .dockerconfigjson: ""

secrets/nowchess/prod/ncs-db-secrets.yaml

@@ -1,13 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: ncs-db-secrets
-  namespace: nowchess
-type: Opaque
-stringData:
-  ACCOUNT_DB_USER: ""
-  ACCOUNT_DB_PASSWORD: ""
-  ACCOUNT_DB_URL: ""
-  STORE_DB_USER: ""
-  STORE_DB_PASSWORD: ""
-  STORE_DB_URL: ""

secrets/nowchess/prod/ncs-internal-secret.yaml

@@ -1,8 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: ncs-internal-secret
-  namespace: nowchess
-type: Opaque
-stringData:
-  INTERNAL_SECRET: ""

secrets/nowchess/prod/ncs-jwt-keys.yaml

@@ -1,9 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: ncs-jwt-keys
-  namespace: nowchess
-type: Opaque
-stringData:
-  private.pem: ""
-  public.pem: ""

secrets/nowchess/staging/ghcr-pull-secret.yaml

@@ -1,8 +1,14 @@
-apiVersion: v1
-kind: Secret
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
 metadata:
   name: ghcr-pull-secret
   namespace: nowchess-staging
-type: kubernetes.io/dockerconfigjson
-data:
-  .dockerconfigjson: ""
+spec:
+  encryptedData:
+    .dockerconfigjson: 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
+  template:
+    metadata:
+      name: ghcr-pull-secret
+      namespace: nowchess-staging
+    type: kubernetes.io/dockerconfigjson

secrets/nowchess/staging/ncs-db-secrets.yaml

@@ -1,13 +1,19 @@
-apiVersion: v1
-kind: Secret
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
 metadata:
   name: ncs-db-secrets
   namespace: nowchess-staging
-type: Opaque
-stringData:
-  ACCOUNT_DB_USER: ""
-  ACCOUNT_DB_PASSWORD: ""
-  ACCOUNT_DB_URL: ""
-  STORE_DB_USER: ""
-  STORE_DB_PASSWORD: ""
-  STORE_DB_URL: ""
+spec:
+  encryptedData:
+    ACCOUNT_DB_PASSWORD: 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
+    ACCOUNT_DB_URL: AgClCnlvHskPFTSieqgaZr84Wvkn5hPn53t8QykFitemA+Pt89IzTNsWuO1yA0+9AzybDOWqLqH48iItUbb8kGJVvGskUTXVVRN+Xg1+JNVEb8ou77jCVAXwbEoEc7XbxVvzHP0bEZMvzeVWuOtPtxeLYpd0hkxNsiC3OCR34ceJf3G3ZlwpVUDPY3+5nhBI2hcFR2IlmWHhxWqNR1d658UeCsMo5BZS7Yc6QA5OXi6M3yCEUOp+dWXvD2WntPfBY711FRnhARQYrsNUVKF+RqXrTqvU3emAfcT2j2wUNYMxcBUBbdrIA+7nDERvas7hTOGVvbw4sg0kFonQkzjkCHGHpBuQD6yxG8gSwRzK4MXasOW/uIclMP52x+xiR/H5MPWOEF6ufRHNy3Gdm4wS1ao/MYGix4+v5YD9Dr/TFD/3jI/HRC3PxADAEalhNlBd6CSuNnJ2oJdgDaBp1MIYmXicdw1KzKBTtV10w02PZRKGRwZZcYqZ+s/tHkvwMx0TDeAWk5gftEFm/Fxf3YCFxi8XB7XlqYx90voHhh6bCAS6ciC9DNFEsmgfeetZi95xsAwIzd+9NY6wBt1B8qg85Zr9EGrLDr6JJ21Os949iS25hblkdupstElTI0r6e0VISZ0y2PllAglhbJ4itdun2a/pE3uXtOxPJCvTv7OgA8TbiBW+4NUKMdysNx8vVPnqwbpIQnmEzt/8e/cHwUEzANCgpDeUrnuisgKodYUer3a0e+zFmZnipAabrZBkckiyYTZi+lsFuIXeDEaybbchfHzLMmkSlVk+IGw=
+    ACCOUNT_DB_USER: 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
+    STORE_DB_PASSWORD: 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
+    STORE_DB_URL: AgAzuSkIoMKbSmyTKLpZoKCmrnLTNTEYQ9UY49gibarDCWZUTPsnridHZcQ3MTXKxWjSW2mt85z1SMG4T8ayNX2BPm1sC6kKadRlmRUXe2lVzgVApNW9eqw++r+hphywuoRSmVVsnH0Uh/WOkCEiu6Xh46q/odD4BQZJGW4+pR9v2nMEHCBFMORcrrisCoutCHjIA3aSSL5tpH3+FsBJXqwAx22iJc63uMQd6twOrdao7if+bI2nQZEM5ceiWRM5MZlGOJArfhJS9Yz8Zg86jQVMfMombKJAmcvdx5xnVkhNwSgRoJ/QHABdW1SmORZVekUbmFpKMeS0o8ZuV6J/MBc0kRrjzPkrQm6VA8J9ji//P3IpwOjCkbYQ8fzxXmvf25TAC3OPxEkE1rTMqCmici6+/dKBKirjdvT40owEGMTQ/wTe7Xu923o1h0D1b50h7nHwx8Eay6OlUnkm5m7dlmfQRg5wxK4Px+op2Vlz8DWgmU2bmVmucQIEKJZmIwZO6eFyNfBbWpK7mp++dgnoLs9pOyv56I0rRc5589wAqbhqEVVEhTIqQw16GFhSnLIZtbat6xWi1qhylo9QDsRtmqgMSplNA8svA4aWAjbtuvvR61BfTdiwqmjh6QbPQn2OxQdRO/kxazICMdMPOYIBFYW3o17EETy90SHb9nELpKsVXN+hIPBWf/Q8PVeT54LjDD4V6qfuRhtFIJNQpIijNrKrh9knVnSTH7nARGhkDGbS9SRfZqZ4x6cqBvtjJVpTN5XXtG+qfSkbEOG/XeL+tD2yokzZmlYLj80=
+    STORE_DB_USER: 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
+  template:
+    metadata:
+      name: ncs-db-secrets
+      namespace: nowchess-staging
+    type: Opaque

secrets/nowchess/staging/ncs-internal-secret.yaml

@@ -1,8 +1,14 @@
-apiVersion: v1
-kind: Secret
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
 metadata:
   name: ncs-internal-secret
   namespace: nowchess-staging
-type: Opaque
-stringData:
-  INTERNAL_SECRET: ""
+spec:
+  encryptedData:
+    INTERNAL_SECRET: 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
+  template:
+    metadata:
+      name: ncs-internal-secret
+      namespace: nowchess-staging
+    type: Opaque

secrets/nowchess/staging/ncs-jwt-keys.yaml

@@ -1,9 +1,15 @@
-apiVersion: v1
-kind: Secret
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
 metadata:
   name: ncs-jwt-keys
   namespace: nowchess-staging
-type: Opaque
-stringData:
-  private.pem: ""
-  public.pem: ""
+spec:
+  encryptedData:
+    private.pem: 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
+    public.pem: AgBfD1PE2cmiyDz9+SGabc+Jg4i2DpVwZzmPvfl9nAWteeO0mRgRGNSCozuHx1mvGz1CmuKugtwQFg1nv7KHrySSfhsA3SrDQuXOUsroBsOMUP8qv3bW3ERB67smcBk9BsO5R8Oa4OU+stH+//IQPV5LocEd03rZhYfi7Vav+LlKNq93QhwBDjiWmi2v4GTxyauDNFhV0np8/3cwd/Nokd5b2aEpQCbvyCIwL1TTBVvAMWEIkXbzfznjEFOc6wShdm9xyv6RTfCM5A0YRjZfVyt46hGCVXmeRdhIgiE7LXlHzwJXQRFPXNsFPLHgx2fJ75H7h0YwGH9CUlGe/qwbnFuQc7+fcWj//PNkOCvvEE5UDIfBeUupouRy8Iy/UaF1LJ3zs8Efv3sK9suH3xXmgVwIqWdFPdWJoAmqEAqG+WDAfhNLkfCRsBfGNkqhcygFOxqvTCPlXkSom85/bJgnQjSsUS1OPHpUE5MH5K9UqNL5uOeNaG/GwSqVF3nvcnaE2BtA2w3qXxTjUqsRvTTvqsGRjzwhrg2/+D2GWLXFsejLb8v8sWSj5EROwuKiNwHps36kMqzZh2BsBwoHwO1gIz1dSxT8JSMvQMvENf9D/5N491pr7w5oow/xbebdLVPZePOAmoAfR1fiRHXcxOSqfC5GkyFKQvpf7rMz97ci/pN5jUQYlfb6KzomXU4q7fl61laxm7EdAFigsZ8Ph1UcNiyv7/D9NlGYmbp9YUqjl86/1MeubALFRsXdgCyToxF8gYWH5lXXJswFch6+sPJ8FpASz/2173+6SVVSqdVMBK6jUoYzbptPr5tfQlWIBOUdVL7kZ3VwA/ofDwStnYA8B/jkf2I41myc3Lf0a5T2MMxEl6+eZlajUGM7TzX3EjWb1PrlcKWAtKCvVEmkL4vJ5iS0+GxNso4AOGbN23DaHwV3X0DLlO93o2qs5emVNirZ3zqdW0AZ1a9QoUi2q8WbVHfDz7CEDr8DJLUFPpHfk1SJuAHHeYxmKAIsXhX2XzsnDix9P40k/apxK5Xy7WKCfLR/LGxGIOZQ8EvrCGsGAlNzTUIZ6JBb/B5WRmVp4hmoSRFjsXKjAs0jW7h84cs5QFa3QwRcOuluJT14ozpn9Upn1LLbU7Q0K94IIG5/lAfNNvB439BtsjEYZ4hidNf4raO9mGd/pzAc1JHq8SBa04EbCbq4+2pJT5hRxyRhMkB9MJgzdlJ9blSzOsB2NjPT4ip8kf3miTQOzDT9fBGqk43dweewNIdhvnyaUOjNgz/WtxcB/W0Iy4BOf+/L/3x4CCfU9EYp
+  template:
+    metadata:
+      name: ncs-jwt-keys
+      namespace: nowchess-staging
+    type: Opaque

secrets/postgres-tunnel/secret.yaml

@@ -1,7 +1,13 @@
-apiVersion: v1
-stringData:
-  id_rsa: ""
-kind: Secret
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
 metadata:
   name: postgres-tunnel-ssh-key
   namespace: postgres-tunnel
+spec:
+  encryptedData:
+    id_rsa: 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
+  template:
+    metadata:
+      name: postgres-tunnel-ssh-key
+      namespace: postgres-tunnel