gcloud-lab/apps/base/customer1/waitlist-api/waitlist-telegram-secret.yaml

apiVersion: v1
kind: Secret
metadata:
    name: waitlist-telegram-secret
    namespace: customer1
type: Opaque
stringData:
    bot_token: CHANGEME
    chat_id: CHANGEME
    admin_api_key: CHANGEME
sops:
    age:
        - recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7
    encrypted_regex: ^(data|stringData)$
feat: add siriusdevops CNPG cluster + waitlist API K8s manifests (#112) - New CNPG PostgreSQL cluster (siriusdevops-pgdb) in customer1 namespace - Single-instance, 20Gi storage, GCS backups to siriusdevops-backups/ - Waitlist database definition (waitlist-db.yaml) - Scheduled backup manifest - Waitlist API deployment, service, HTTPRoute, and Telegram secret placeholder - Kustomization wiring for both siriusdevops-db and waitlist-api 2026-05-14 19:24:33 -04:00			`apiVersion: v1`
			`kind: Secret`
			`metadata:`
			`name: waitlist-telegram-secret`
			`namespace: customer1`
			`type: Opaque`
			`stringData:`
			`bot_token: CHANGEME`
			`chat_id: CHANGEME`
fix: container hardening + NetworkPolicy for waitlist-api - deployment.yaml: securityContext (runAsNonRoot, readOnlyRootFilesystem, drop ALL caps) - network-policy.yaml: egress only to CNPG PG (5432) + api.telegram.org (443) - kustomization.yaml: register new NetworkPolicy resource - waitlist-telegram-secret: add admin_api_key field 2026-05-15 00:00:58 +00:00			`admin_api_key: CHANGEME`
feat: add siriusdevops CNPG cluster + waitlist API K8s manifests (#112) - New CNPG PostgreSQL cluster (siriusdevops-pgdb) in customer1 namespace - Single-instance, 20Gi storage, GCS backups to siriusdevops-backups/ - Waitlist database definition (waitlist-db.yaml) - Scheduled backup manifest - Waitlist API deployment, service, HTTPRoute, and Telegram secret placeholder - Kustomization wiring for both siriusdevops-db and waitlist-api 2026-05-14 19:24:33 -04:00			`sops:`
			`age:`
			`- recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7`
			`encrypted_regex: ^(data\|stringData)$`