31 lines
1.2 KiB
YAML
31 lines
1.2 KiB
YAML
apiVersion: secrets.infisical.com/v1beta1
|
|
kind: InfisicalStaticSecret
|
|
metadata:
|
|
name: bot-secrets
|
|
namespace: polymarket-bot
|
|
spec:
|
|
# Shared, read-only machine identity (no write grant, no PushSecret).
|
|
infisicalAuthRef:
|
|
name: infisical-auth
|
|
namespace: infisical-operator
|
|
sources:
|
|
# App-specific secrets (4): DATABASE_URL, POLYMARKET_API_KEY/SECRET/PASSPHRASE
|
|
- projectId: 17e98e9d-70f5-43d1-8382-7da818dfcdd0 # project "homelab"
|
|
environmentSlug: prod
|
|
secretPath: /polymarket-bot
|
|
# Telegram (2): TELEGRAM_BOT_TOKEN, TELEGRAM_CHAT_ID — reused from the shared
|
|
# /telegram path (deduplicated; same token as the other 5 namespaces).
|
|
- projectId: 17e98e9d-70f5-43d1-8382-7da818dfcdd0
|
|
environmentSlug: prod
|
|
secretPath: /telegram
|
|
syncOptions:
|
|
refreshInterval: 60s
|
|
targets:
|
|
- kind: Secret
|
|
name: bot-secrets-infisical # parallel name — old bot-secrets stays live until 3c
|
|
namespace: polymarket-bot
|
|
creationPolicy: Owner
|
|
# key passthrough: synced Secret carries all 6 keys verbatim.
|
|
# PAPER_* and the empty WALLET_PRIVATE_KEY/COINGECKO_API_KEY are config,
|
|
# not secrets — they live in the bot-config ConfigMap, not here.
|