Adds the env vars and secret structure needed for the official-bots pod
to connect to the external tournament server at 141.37.123.132:8086.
- TOURNAMENT_SERVER_URL and TOURNAMENT_BOT_DIFFICULTY added as plain env
vars to the nowchess-official-bots rollout
- TOURNAMENT_BOT_TOKEN wired from a new ncs-tournament-secret SealedSecret
- Placeholder SealedSecret files added for staging, eu-central-1-prod, and
htwg-1-prod — must be sealed with a real bot token before deploying
TOURNAMENT_ID is intentionally omitted; it is per-tournament and supplied
at runtime via POST /api/bots/official/join-tournament.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sealed from live cluster state — no plaintext ever on disk:
- redis/github (dockerconfigjson pull secret)
- nowchess/remotek6-certs (prod, staging, kargo)
Added to kustomization:
- kargo/discord-webhook-secret
- nowchess/kargo/github-image-secret
- redis/github-pull-secret
- remotek6-certs for all three namespaces
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
LQ63
Janis Eccarius