chore: remove plaintext ConfigMap (use SOPS encryption instead)

k8s/app/memory-deployment.yaml

@@ -1,95 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: memory-service
-  namespace: poimen
-  labels:
-    app: memory-service
-spec:
-  replicas: 2
-  selector:
-    matchLabels:
-      app: memory-service
-  template:
-    metadata:
-      labels:
-        app: memory-service
-    spec:
-      serviceAccountName: memory-service
-      containers:
-      - name: memory-service
-        image: forgejo.riotpiao.com/rock/poimen-memory:latest
-        imagePullPolicy: Always
-        ports:
-        - name: http
-          containerPort: 8080
-          protocol: TCP
-        
-        # Read all config from ConfigMap
-        envFrom:
-        - configMapRef:
-            name: memory-service-config
-        
-        # Secrets (override/add to ConfigMap)
-        env:
-        - name: DATABASE_URL
-          valueFrom:
-            secretKeyRef:
-              name: memory-db-credentials
-              key: connection-string
-        - name: MEM_API_KEY
-          valueFrom:
-            secretKeyRef:
-              name: memory-api-keys
-              key: primary-key
-        
-        resources:
-          requests:
-            cpu: 500m
-            memory: 512Mi
-          limits:
-            cpu: 1000m
-            memory: 1Gi
-        
-        livenessProbe:
-          httpGet:
-            path: /health
-            port: http
-          initialDelaySeconds: 10
-          periodSeconds: 10
-        
-        readinessProbe:
-          httpGet:
-            path: /health
-            port: http
-          initialDelaySeconds: 5
-          periodSeconds: 5
-      
-      # ImagePullSecret for private registry
-      imagePullSecrets:
-      - name: registry-credentials
-
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: memory-service
-  namespace: poimen
-  labels:
-    app: memory-service
-spec:
-  type: ClusterIP
-  ports:
-  - name: http
-    port: 8080
-    targetPort: http
-    protocol: TCP
-  selector:
-    app: memory-service
-
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: memory-service
-  namespace: poimen

k8s/app/memory-service-configmap.yaml

@@ -1,19 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: memory-service-config
-  namespace: poimen
-  labels:
-    app: memory-service
-    version: "1"
-data:
-  # Inter-pod URLs (cluster-internal DNS)
-  MEMORY_SERVICE_ADDR: "http://memory-service.poimen.svc.cluster.local:8080"
-  AUTHENTIK_ISSUER: "http://authentik-server.iam.svc.cluster.local/application/o/poimen-memory/"
-  WEBHOOK_URL: "http://temporal-webhook.temporal.svc.cluster.local:9000/webhook"
-  OPENSEARCH_URL: "http://opensearch.poimen.svc.cluster.local:9200"
-  
-  # Service addresses for internal communication
-  POSTGRES_HOST: "memory-db.poimen.svc.cluster.local"
-  POSTGRES_PORT: "5432"
-  POSTGRES_DB: "memory"