fix(polymarket-bot): fix corrupted secret and migrate to Gitea registry images

- Fix bot-secrets: replace corrupted REDACTED base64 values with correct ones
- Update deployment-api and deployment-bot to use git.chemavx.xyz registry images
- Add imagePullSecrets (gitea-registry) to api and bot deployments
- Add secret-gitea-registry.yaml manifest for ArgoCD to manage

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

polymarket-bot/deployment-api.yaml

@@ -1,11 +1,6 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  annotations:
-    deployment.kubernetes.io/revision: '1'
-    kubectl.kubernetes.io/last-applied-configuration: '{"apiVersion":"apps/v1","kind":"Deployment","metadata":{"annotations":{},"name":"api","namespace":"polymarket-bot"},"spec":{"replicas":1,"selector":{"matchLabels":{"app":"api"}},"template":{"metadata":{"labels":{"app":"api"}},"spec":{"containers":[{"command":["uvicorn","api.main:app","--host","0.0.0.0","--port","8000"],"envFrom":[{"secretRef":{"name":"bot-secrets"}}],"image":"docker.io/library/polymarket-bot-api:v2","imagePullPolicy":"Never","name":"api","ports":[{"containerPort":8000}],"resources":{"limits":{"cpu":"500m","memory":"512Mi"},"requests":{"cpu":"100m","memory":"256Mi"}}}]}}}}
-
-      '
   name: api
   namespace: polymarket-bot
 spec:
@@ -25,6 +20,8 @@ spec:
       labels:
         app: api
     spec:
+      imagePullSecrets:
+      - name: gitea-registry
       containers:
       - command:
         - uvicorn
@@ -32,7 +29,7 @@ spec:
         - --host
         - 0.0.0.0
         - --port
-        - '8000'
+        - "8000"
         envFrom:
         - secretRef:
             name: bot-secrets
@@ -56,4 +53,3 @@ spec:
       schedulerName: default-scheduler
       securityContext: {}
       terminationGracePeriodSeconds: 30
-

polymarket-bot/deployment-bot.yaml

@@ -1,11 +1,6 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  annotations:
-    deployment.kubernetes.io/revision: '1'
-    kubectl.kubernetes.io/last-applied-configuration: '{"apiVersion":"apps/v1","kind":"Deployment","metadata":{"annotations":{},"name":"bot","namespace":"polymarket-bot"},"spec":{"replicas":1,"selector":{"matchLabels":{"app":"bot"}},"template":{"metadata":{"labels":{"app":"bot"}},"spec":{"containers":[{"command":["python3","-m","bot.main"],"envFrom":[{"secretRef":{"name":"bot-secrets"}}],"image":"docker.io/library/polymarket-bot:v5","imagePullPolicy":"Never","name":"bot","resources":{"limits":{"cpu":"500m","memory":"512Mi"},"requests":{"cpu":"100m","memory":"256Mi"}}}]}}}}
-
-      '
   name: bot
   namespace: polymarket-bot
 spec:
@@ -25,6 +20,8 @@ spec:
       labels:
         app: bot
     spec:
+      imagePullSecrets:
+      - name: gitea-registry
       containers:
       - command:
         - python3
@@ -50,4 +47,3 @@ spec:
       schedulerName: default-scheduler
       securityContext: {}
       terminationGracePeriodSeconds: 30
-

polymarket-bot/secret-bot-secrets.yaml

@@ -1,22 +1,17 @@
 apiVersion: v1
-data:
-  COINGECKO_API_KEY: REDACTED
-  DATABASE_URL: REDACTED
-  PAPER_BANKROLL: REDACTED
-  PAPER_MODE: REDACTED
-  POLYMARKET_API_KEY: REDACTED
-  POLYMARKET_PASSPHRASE: REDACTED
-  POLYMARKET_SECRET: REDACTED
-  TELEGRAM_BOT_TOKEN: REDACTED
-  TELEGRAM_CHAT_ID: REDACTED
-  WALLET_PRIVATE_KEY: REDACTED
 kind: Secret
 metadata:
-  annotations:
-    kubectl.kubernetes.io/last-applied-configuration: '{"apiVersion":"v1","kind":"Secret","metadata":{"annotations":{},"name":"bot-secrets","namespace":"polymarket-bot"},"stringData":{"COINGECKO_API_KEY":"","DATABASE_URL":"postgresql://bot:bot@postgres:5432/polymarket","PAPER_BANKROLL":"10000","PAPER_MODE":"true","POLYMARKET_API_KEY":"b07767c6-5fa1-94a3-a575-0f49beed86c0","POLYMARKET_PASSPHRASE":"715160758af519b097a2ca2f847cadb80dbcc970c1cf52196c57d2678b3c29b0","POLYMARKET_SECRET":"sTjA4xHJFJ-gI0w3xNQCl6zbS4u430kA_AkVDrSoTfg=","TELEGRAM_BOT_TOKEN":"","TELEGRAM_CHAT_ID":"","WALLET_PRIVATE_KEY":""},"type":"Opaque"}
-
-      '
   name: bot-secrets
   namespace: polymarket-bot
 type: Opaque
-
+data:
+  COINGECKO_API_KEY: ""
+  DATABASE_URL: cG9zdGdyZXNxbDovL2JvdDpib3RAcG9zdGdyZXM6NTQzMi9wb2x5bWFya2V0
+  PAPER_BANKROLL: MTAwMDA=
+  PAPER_MODE: dHJ1ZQ==
+  POLYMARKET_API_KEY: YjA3NzY3YzYtNWZhMS05NGEzLWE1NzUtMGY0OWJlZWQ4NmMw
+  POLYMARKET_PASSPHRASE: NzE1MTYwNzU4YWY1MTliMDk3YTJjYTJmODQ3Y2FkYjgwZGJjYzk3MGMxY2Y1MjE5NmM1N2QyNjc4YjNjMjliMA==
+  POLYMARKET_SECRET: c1RqQTR4SEpGSi1nSTB3M3hOUUNsNnpiUzR1NDMwa0FfQWtWRHJTb1RmZz0=
+  TELEGRAM_BOT_TOKEN: ""
+  TELEGRAM_CHAT_ID: ""
+  WALLET_PRIVATE_KEY: ""

polymarket-bot/secret-gitea-registry.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: gitea-registry
+  namespace: polymarket-bot
+type: kubernetes.io/dockerconfigjson
+data:
+  .dockerconfigjson: eyJhdXRocyI6eyJnaXQuY2hlbWF2eC54eXoiOnsidXNlcm5hbWUiOiJjaGVtYXZ4IiwicGFzc3dvcmQiOiJHaXRBZG1pbjIwMjZ4IiwiYXV0aCI6IlkyaGxiV0YyZURwSGFYUkJaRzFwYmpJd01qWjQifX19