chemavxandClaude Opus 4.8
428f708fe2
3a of the researchowl-secrets centralization. Adds researchowl-secrets-infisical synced from homelab/prod /researchowl (5 lowercase-hyphenated keys, passthrough). Parallel name — old out-of-band researchowl-secrets stays live until 3c. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
28 lines
1.2 KiB
YAML
28 lines
1.2 KiB
YAML
apiVersion: secrets.infisical.com/v1beta1
|
|
kind: InfisicalStaticSecret
|
|
metadata:
|
|
name: researchowl-secrets
|
|
namespace: researchowl
|
|
spec:
|
|
# Shared, read-only machine identity (no write grant, no PushSecret).
|
|
# Source is the /researchowl folder (this bot's own creds: Anthropic, both Ghost
|
|
# admin keys, the interactive bot token 079fa1a0 — NOT the notify bot — and the
|
|
# access allowlist). Infisical key names already match the deployment's
|
|
# secretKeyRef.key values (lowercase-hyphenated), so this is straight passthrough.
|
|
infisicalAuthRef:
|
|
name: infisical-auth
|
|
namespace: infisical-operator
|
|
sources:
|
|
- projectId: 17e98e9d-70f5-43d1-8382-7da818dfcdd0 # project "homelab"
|
|
environmentSlug: prod
|
|
secretPath: /researchowl
|
|
syncOptions:
|
|
refreshInterval: 60s
|
|
targets:
|
|
- kind: Secret
|
|
name: researchowl-secrets-infisical # parallel name — old secret stays live until 3c
|
|
namespace: researchowl
|
|
creationPolicy: Owner
|
|
# key passthrough: synced Secret carries the 5 lowercase-hyphenated keys verbatim
|
|
# (anthropic-api-key, ghost-api-key, ghost-api-key-en, telegram-allowed-users, telegram-bot-token)
|