feat(secrets): seal cluster secrets missing from GitOps

Sealed from live cluster state — no plaintext ever on disk:
- redis/github (dockerconfigjson pull secret)
- nowchess/remotek6-certs (prod, staging, kargo)

Added to kustomization:
- kargo/discord-webhook-secret
- nowchess/kargo/github-image-secret
- redis/github-pull-secret
- remotek6-certs for all three namespaces

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Janis Eccarius
2026-05-30 12:29:18 +02:00
parent a40831d55f
commit d509ebec88
5 changed files with 68 additions and 0 deletions
@@ -0,0 +1,16 @@
---
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
name: remotek6-certs
namespace: nowchess-staging
spec:
encryptedData:
ca.crt: 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
client.crt: AgBrULi+7xV+mcHm/zQI2HoyILPDpfNTYZLwQMReBp8F+RMOOe47npWW6mtkQaym76csB1O7i5KPSj1gxU09xI4PrUsDUbByy66N0WJtIgC3uKRU0nZg9PlwOw7qtsHO+D1K7ouICXLc5HzMBvkwAuPfG0OTI5SgHp1QWOUS8u8xdBfzspOyCzGxnV99++etj/cd3atVB/pI61dSxAetg6HluHW0a+3+rtRL54BcTwQbfvoUYwNSND52FTDfArjFmOSc3fLQb8GZ6YEg9Thpvs4SuDT7L6Yh/kXdnUeHy8JiVK81Wr3ozWkcXigRbo0usSO5Yx/CWL9Sl0w0EGE+N/C0OFCOLtvbjJ+2UbfdA0o2+srmtNRiwgBX/IRx5bmyNZnARu5jBEGOZKN3lqyhw3bhI0UQVZ4bLVE5YpWEp6K/c4yP6zSAM98gJva0O4wPz0Y3nIbTzUWrwhCEG4iv3xoXjDLWwodUmYKNSTBAsfl+8OrS4HcT5LBL83k54/tlVdnojBK0xmnITn9TZSHZ68sztEtNiAWpaNkwhtLjDQ+/x8pUbwTwchr6SPB81mYaccImD0RzeveVibD/L8fKytNtfdmuIrF5tTrRAcncgSJ/UAjSmlFfrwBPIoCmd1qaEm1qiGRIRX/YapT+v3yLo/H7TPNNv0nXHUsexRoREPYNlt1lAYDLtWMduqVYzwb9v4kWwh/bz/db45p8ep9/KCI1NwOWxSsZQ/zuGDW6PLOVKfuVEvJXAYre/fg6O5v1CZpf8KBTY9Y1YrJB9H4Lc2aGGye9tv9QcTO9ROVlRwYMGG/QG6qwi16XNwsna3lWTEbnby3LJsBE+DLrgluG+KBAxUoYCmiWAjTHlSu9rkXUBimDCEv35htSzHNrQuDlAEE6nWeI/19qXJl17sYt3KtFVSw2uDfj0/IVhX4WsTpler1Pkx4lSKOp/B70xOBfS9z7V4mc1JW6TCAXea0b8+lT0LDYbbEkeu/BJdiHwsMJE6jF0PyAKHfI8rTvDgoCKiYi2BwYX5APNAefY1/k/7gtLMa9mnjD6HYJfGTyyT6QmHdxlKVpQG4h8PkcjdvkoXJgAR8MlzYfjoPqHjawHbKHbjPrz69CdBEpddU+GSF3ITmRbT1rEYOQ/4o6nKRsdR4/o+9INE8WxNQdVkjkUpJjwPnN6mjnGbtejia6F8J/4JC/mS+mOskppAjAB9PxSRnIiJSG244kNXk8pAD+So/Fv0+XaL5Sox90o4I57pL5RFXJhBEa3Jr2PyYc9anyHnrIFYo5ko1EAipSDhrFeTEANHHHLoD0OtsWDtKUqXMecAwOiSmOL1/aWhnAmEVYt/59lzfrF12e6egcXOE2vsl1NJZVYWTRpZFm9gZcwgsp+PW9/Nf7SV9w19h0F00lGyvj+lTyl9EHevV3MREpqJsLgkz/hdaX96zuzjA7RtysKt+UC+dgRrgLEfAVMrCJE8IJRpHe5sxX3rc+bgzuAynMEw3alkoxLGm3IsQ1inLy58ynmikN4jS4xe4vbsL1QZhd9hVApu+g7TIBDnbUAw/qRkQgDTfybj9ePYBZiwd7iAteEbulDhcfjhlq8/HPePx3x/1dDkwANQi/Dmx4SI6yJLIoD1/y1efD3e9pCQKzLas4oRoPQGzkwVGooIhVEXRC8odCJ+xBIjQEI8XwP9tE8qnbQ8JpGNSPrmGpZcJWxBgTmRmo6C0VDwUyAyu+/RAFLkfn2fVcA5Iijg5VRuoQHR6BATvJP8Zs9mkn5mh/Jx0M/6c73qMlMTYOtzTaeAIfcGznK9gumXL+PfWNkMISb5pM+dgDAO0aruZQ1HYvYH4v9n5hmOIAehAve//g/1QewdIaNaC7l5m9t9kTAIJMXPtS3ROgxxhXpWtZWGQkjX/P1cRj9WBJsJ5VnLZAZzMMhzitGpKR102Me1JCRX+YN/1vlv1BXu1MdYrTV9UuaMiTczumWy+Y+kVYyn41bkK6k2nsjyJ5XvU1dTVdd/FFlKRviJKHQOuNmU2n/mWGLi8bbYMDhWJNUum07KOlEH2BnucOWl6cxb0TFEHFVjTT7644a19JGAVXJQzdnJmul4XqbdPso7FCGCUnuwIT9jmQ+Cb6O/Z/4Xt+zCiJx1rzeIac12XZwhkp/7G4oD6d+cIrTQSr2q+aATNya2G5f1i0tCb8TpSo4td3Y3ebwDybl0QmdWiWLUn/iuoWRASLZfNKk4O9DD1cHuatanI3gxqq0dErs6U3Ttxs9ZLERcX2N///W45YRRI+fZA4YAbTJ+poVM0iKrBOW3qbm1HOw8Q3oupK/3tocnjK3JnE0XUPsW6wRoGFm5veS+vf131F2tRBxYMnmFE/epFqPbg87ebmDNmEIvYz0IkTEKOsJuyNkLSFuwGS/sj5VG7RL9pzl42m5ILpV8CYlEOQErsSDncaaPcrrpJNj2Mff/YrePWiGV5pzYOrWbq3pJ8d9cbvbd9NNk4Vpoa6vQ+RIgNgtQjNuZbE5cm+YgW3spHKOd93mvtG/EhDz7PSTujKW7nNHroEOBA+euZqfC7DfsCgd/o+WDQ1onVBJz1zG9vaJuwy8o5dRroFejU+B1S20A5Haw7ksmO3DxDyft72xoYhqSKUufgubnniNhRgNm1Befw8qFX5BsECttsmbtWN6h/gn89iZnzDs7ve9XjFvvkBXpVMVg8BgdHAjDy1DDpNVoyWyjjoPECpNinZ2RQUl+oS7xMwShzYm+cNeNRF9PNl45BbPlhFtmcjwadiCebpLJY4F7Dvrr1jVU15AQ==
client.key: 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
template:
metadata:
name: remotek6-certs
namespace: nowchess-staging
type: Opaque