k8s-and-chill/rendered/envs/production/ocis/configmap-auth-service.yaml at 2ea94241afed78a4a79484c50257856a0c34877a - gitea_admin/k8s-and-chill - Forgejo: Beyond coding. We forge.

gitea_admin/k8s-and-chill

Felix Wolf 2ea94241af fix(ocis): Move secret generation to PreSync init Job

Removes all 13 Helm-generated secrets from rendered output and instead
generates them at deploy time via an init Job. The Job creates secrets
with random credentials only if they don't already exist, ensuring
idempotent deploys. Runs as ArgoCD PreSync hook so secrets are ready
before oCIS pods start.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-06 13:27:17 +02:00

11 lines

260 B

YAML

Raw Blame History

 apiVersion: v1
 data:
   service-account-id: 3ccdd552-d559-41f5-865c-2eb088c633e7
 kind: ConfigMap
 metadata:
   annotations:
     a8r.io/repository: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
   labels: null
   name: auth-service
   namespace: ocis