chemavx/k8s-manifests
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
20 Commits 2 Branches 0 Tags
f42cdee58596b4166ca4418a59d75e06b0e0b495
Commit Graph
7 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
chemavx f42cdee585 security: remove all REDACTED secrets from repo, add pre-commit guard 
- Delete 26 secret manifests containing REDACTED placeholder values
  (15 cert-manager TLS + 11 app secrets across 8 namespaces)
- REDACTED is valid base64 that decodes to non-UTF-8 bytes — ArgoCD
  applying these manifests corrupts live secrets in the cluster
- Add .githooks/pre-commit that rejects any .yaml with REDACTED
- Add README.md documenting secret management policy and manual
  creation commands for each service
- n8n secret manifests already fixed in previous commits (618b1e8, db04fd2)
 2026-04-14 20:02:51 +00:00
chemavx db04fd2cbc fix: remove REDACTED data from n8n-tls secret manifest, prevent ArgoCD from corrupting cert-manager TLS 2026-04-14 19:58:44 +00:00
chemavx 618b1e8d11 fix: remove sensitive data from secret manifest, prevent ArgoCD from overwriting encryption key 2026-04-14 19:09:41 +00:00
chemavxandClaude Sonnet 4.6 c9d4877742 fix(polymarket-bot): remove cert-manager managed TLS secret from repo 
ArgoCD was overwriting the polymarket-tls secret with REDACTED values,
corrupting the TLS cert. This secret is managed by cert-manager and
must not be tracked in git.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-13 20:33:36 +00:00
chemavxandClaude Sonnet 4.6 e59da6b3a9 chore(polymarket-bot): clean up manifests, remove stale kubectl annotations 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-13 20:28:27 +00:00
chemavxandClaude Sonnet 4.6 45c4dde929 fix(polymarket-bot): fix corrupted secret and migrate to Gitea registry images 
- Fix bot-secrets: replace corrupted REDACTED base64 values with correct ones
- Update deployment-api and deployment-bot to use git.chemavx.xyz registry images
- Add imagePullSecrets (gitea-registry) to api and bot deployments
- Add secret-gitea-registry.yaml manifest for ArgoCD to manage

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-13 20:27:23 +00:00
chemavx ff2e6cc985 feat: export all K8 Plus cluster manifests 
Namespaces: argocd, authentik, backup-system, cloudflare-ddns,
gitea, homarr, monitoring, n8n, openclaw, polymarket-bot, vaultwarden
Cluster-wide: clusterissuers, namespaces
Secrets: redacted (structure only, data=REDACTED)
 2026-04-10 08:57:02 +00:00