chemavxandClaude Opus 4.8
d3bd1a3503
InfisicalStaticSecret syncs shared /smtp-gmail -> ghost-en-smtp-infisical (parallel name, passthrough SMTP_USER/SMTP_PASS). Old secret stays live until 3c. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
26 lines
954 B
YAML
26 lines
954 B
YAML
apiVersion: secrets.infisical.com/v1beta1
|
|
kind: InfisicalStaticSecret
|
|
metadata:
|
|
name: ghost-en-smtp
|
|
namespace: ghost-en
|
|
spec:
|
|
# Shared, read-only machine identity (no write grant, no PushSecret).
|
|
# Source is the SHARED /smtp-gmail folder (same Gmail sender account used by
|
|
# both blogs); zona-exclusion references the same path with a key remap.
|
|
infisicalAuthRef:
|
|
name: infisical-auth
|
|
namespace: infisical-operator
|
|
sources:
|
|
- projectId: 17e98e9d-70f5-43d1-8382-7da818dfcdd0 # project "homelab"
|
|
environmentSlug: prod
|
|
secretPath: /smtp-gmail
|
|
syncOptions:
|
|
refreshInterval: 60s
|
|
targets:
|
|
- kind: Secret
|
|
name: ghost-en-smtp-infisical # parallel name — old secret stays live until 3c
|
|
namespace: ghost-en
|
|
creationPolicy: Owner
|
|
# key passthrough: synced Secret carries SMTP_USER / SMTP_PASS verbatim
|
|
# (Infisical key names already match the deployment's secretKeyRef keys).
|