6 Commits

Author	SHA1	Message	Date
Janis Eccarius	24b9c52e90	chore(secrets): delete duplicate sealed secret files ... git-pull-secret.yaml: duplicate of redis/github-pull-secret.yaml gitea-secret.yaml: duplicate (empty creds) of nowchess/kargo/github-image-secret.yaml Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-30 12:42:23 +02:00
Janis Eccarius	d509ebec88	feat(secrets): seal cluster secrets missing from GitOps ... Sealed from live cluster state — no plaintext ever on disk: - redis/github (dockerconfigjson pull secret) - nowchess/remotek6-certs (prod, staging, kargo) Added to kustomization: - kargo/discord-webhook-secret - nowchess/kargo/github-image-secret - redis/github-pull-secret - remotek6-certs for all three namespaces Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-30 12:29:18 +02:00
Janis Eccarius	a40831d55f	feat(secrets): update ghcr-pull-secret with new encrypted docker config for nowchess and nowchess-staging	2026-05-30 12:20:46 +02:00
Janis Eccarius	666aab1e70	feat(sealed-secrets): add multiple SealedSecrets for various services and configurations	2026-05-30 12:02:34 +02:00
Janis Eccarius	a4d9c41c27	feat(secrets): migrate secrets to SealedSecrets format and update configurations	2026-05-30 11:55:49 +02:00
Janis	2022631f45	feat(nowchess): add Kargo project, Rollouts deployment, and secrets ... - 9 Kargo Warehouses (one per microservice), staging + prod stages - PromotionTask: clone GitOps, kustomize-set-image, Gitea PR, ArgoCD sync - BlueGreen Rollouts for all 9 services with health probes and envFrom - staging,deployed / production,deployed Quarkus multi-profile support - CORS_ORIGINS and QUARKUS_PROFILE injected via nowchess-env-config ConfigMap - Plain K8s Secrets with empty values in secrets/nowchess/ (staging, prod, kargo) - ArgoCD Applications for kargo project, staging, and prod deployments Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-30 10:58:45 +02:00