rock
c538397db4
CI / CI (pull_request) Successful in 4m21s
- Add k8s/app/config.yaml (ConfigMap) for non-sensitive env vars - Add k8s/app/auth.enc.yaml (SOPS-encrypted) for AUTHENTIK_ISSUER, AUDIENCE - Add k8s/app/secret-generator.yaml (KSOPS generator for ArgoCD) - Deployment uses envFrom instead of inline env vars - Update Authentik slug from poimen-memory to poimen (404 on OIDC discovery) - Update OpenSearch JWKS/issuer URLs to match new slug - Reloader (auto-reload-all=true) triggers rollout on config change
14 lines
337 B
YAML
14 lines
337 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
namespace: poimen
|
|
resources:
|
|
# vault-pvc.yaml removed — memory service uses pgvector, not local storage
|
|
- deployment.yaml
|
|
- service.yaml
|
|
- config.yaml
|
|
- obsidian.yaml
|
|
# Legacy secret managed separately
|
|
# - secrets.yaml
|
|
generators:
|
|
- secret-generator.yaml
|