Adds the env vars and secret structure needed for the official-bots pod
to connect to the external tournament server at 141.37.123.132:8086.
- TOURNAMENT_SERVER_URL and TOURNAMENT_BOT_DIFFICULTY added as plain env
vars to the nowchess-official-bots rollout
- TOURNAMENT_BOT_TOKEN wired from a new ncs-tournament-secret SealedSecret
- Placeholder SealedSecret files added for staging, eu-central-1-prod, and
htwg-1-prod — must be sealed with a real bot token before deploying
TOURNAMENT_ID is intentionally omitted; it is per-tournament and supplied
at runtime via POST /api/bots/official/join-tournament.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
git-pull-secret.yaml: duplicate of redis/github-pull-secret.yaml
gitea-secret.yaml: duplicate (empty creds) of nowchess/kargo/github-image-secret.yaml
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
github/git-pull-secret.yaml was sealed with redis namespace — same secret
as redis/github-pull-secret.yaml which was sealed from live cluster.
Keeping the correctly placed redis/ version.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
github-image-secret.yaml covers same name/namespace with real credentials.
gitea-secret.yaml had empty creds — was a placeholder.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sealed from live cluster state — no plaintext ever on disk:
- redis/github (dockerconfigjson pull secret)
- nowchess/remotek6-certs (prod, staging, kargo)
Added to kustomization:
- kargo/discord-webhook-secret
- nowchess/kargo/github-image-secret
- redis/github-pull-secret
- remotek6-certs for all three namespaces
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- Created new documentation files including TROUBLESHOOTING.md, CONFIGURATION.md, and CONTRIBUTING.md.
- Added deployment guide with automated and manual instructions.
- Introduced new YAML configurations for Kubernetes resources and Helm charts.
- Implemented a deployment script for setting up the GitOps infrastructure.
LQ63
Janis Eccarius
Janis