argoyleandClaude Opus 5.5
3ed363e386
Replace the AWS deploy-prod job (failing since CI left AWS) with deploy-prod-frostmoln, and run under the restricted Pod Security profile with the namespace's oci-registry pull secret. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01H6eVuR4Yt3m7TbDTDwyZJi
22 lines
555 B
YAML
22 lines
555 B
YAML
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: geo-service
|
|
spec:
|
|
refreshInterval: 1h
|
|
# The namespace's store (infra frostmoln/production/apps.tf); MAPS_API_KEY
|
|
# lives in the Frostmoln Secret "dancefinder", next to the API's settings
|
|
# (infra frostmoln/production/scripts/seed-app.sh).
|
|
secretStoreRef:
|
|
name: frostmoln
|
|
kind: SecretStore
|
|
target:
|
|
name: geo-service
|
|
template:
|
|
engineVersion: v2
|
|
data:
|
|
MAPS_API_KEY: "{{ .MAPS_API_KEY }}"
|
|
dataFrom:
|
|
- extract:
|
|
key: dancefinder
|