Sirius Devops
ac994f144a
- deployment.yaml: securityContext (runAsNonRoot, readOnlyRootFilesystem, drop ALL caps) - network-policy.yaml: egress only to CNPG PG (5432) + api.telegram.org (443) - kustomization.yaml: register new NetworkPolicy resource - waitlist-telegram-secret: add admin_api_key field
14 lines
337 B
YAML
14 lines
337 B
YAML
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: waitlist-telegram-secret
|
|
namespace: customer1
|
|
type: Opaque
|
|
stringData:
|
|
bot_token: CHANGEME
|
|
chat_id: CHANGEME
|
|
admin_api_key: CHANGEME
|
|
sops:
|
|
age:
|
|
- recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7
|
|
encrypted_regex: ^(data|stringData)$
|