chemavxandClaude Fable 5
ae0b5f9492
App corre en docker compose en n97 (semana de calibración). El app-of-apps no es recursivo: nada de este directorio se sincroniza hasta aplicar a mano argocd-app.yaml. Checklist de activación en PROMOTION.md (imagen construida, secrets en Infisical /reddit-intel, copia de la BD al PVC). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
27 lines
943 B
YAML
27 lines
943 B
YAML
apiVersion: secrets.infisical.com/v1beta1
|
|
kind: InfisicalStaticSecret
|
|
metadata:
|
|
name: reddit-intel-secrets
|
|
namespace: reddit-intel
|
|
spec:
|
|
# Shared, read-only machine identity (no write grant, no PushSecret).
|
|
# Source is the /reddit-intel folder. Expected keys (lowercase-hyphenated,
|
|
# straight passthrough to the deployment's secretKeyRef values):
|
|
# reddit-client-id, reddit-client-secret, llm-api-key,
|
|
# dashboard-auth-token, telegram-bot-token, telegram-chat-id
|
|
# telegram-* pueden crearse vacíos (las notificaciones son opcionales).
|
|
infisicalAuthRef:
|
|
name: infisical-auth
|
|
namespace: infisical-operator
|
|
sources:
|
|
- projectId: 17e98e9d-70f5-43d1-8382-7da818dfcdd0 # project "homelab"
|
|
environmentSlug: prod
|
|
secretPath: /reddit-intel
|
|
syncOptions:
|
|
refreshInterval: 60s
|
|
targets:
|
|
- kind: Secret
|
|
name: reddit-intel-secrets
|
|
namespace: reddit-intel
|
|
creationPolicy: Owner
|