Ultradesu
8dd1868c25
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 6s
k8s-secrets
The k8s-secrets Argo CD Application reads this directory through
core-state/values.yaml and deploys into namespace k8s-secret.
External Secrets loads the k8s/openai/creds Vaultwarden item into
openai-creds. The reader at pass.hexor.cy can only read that Secret and is
protected by the Keycloak forward-auth proxy. Its access policy is managed in
terraform/keycloak/terraform.tfvars.
The Kubernetes resource names and namespace match the former deployment so Argo CD can switch the source path without replacing the service or certificate.