riotpiao-poimen/homelab
2
0
Fork 0
Code Issues 23 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

chore(iam): retire the .enc files whose values rotation invalidated

Browse Source 
grafana-oidc and comfyui-oauth2-proxy held nothing but the rotated credential, so
both files are gone. oauth2-credentials survives with the two secrets that were not
rotated (api-gw, poimen) and drops the three that were (grafana, minio, paperless).

Leaving them would be worse than untidy: sops-secrets ran with selfHeal, so a stale
file silently rewrites a rotated secret back to a value ZITADEL no longer accepts.
32 files remain, down from 34.
This commit is contained in:
rock
2026-10-27 14:47:48 -07:00
parent 36d6dad956
commit 306c68e7ea
4 changed files with 17 additions and 75 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/argocd/secrets/secret-generator.yaml
-2
View File
@@ -15,8 +15,6 @@ files:
- forgejo-registry-pull.enc.yaml
- forgejo-runner-token.enc.yaml
- forgejo-secrets.enc.yaml
- comfyui-oauth2-proxy.enc.yaml
- grafana-oidc-secrets.enc.yaml
- grafana-secrets.enc.yaml
- homelab-ca-secrets.enc.yaml
- loki-secrets.enc.yaml