added gitea secret to vault

2026-08-31 09:03:45 +05:30
parent 7faa3e415b
commit 5c0e7b04e3
1 changed files with 7 additions and 4 deletions
@@ -73,10 +73,13 @@ gitea:
      # pod (re)start, actively syncing the admin password from whatever
      # this env var resolves to. That's what caused the value->valueFrom
      # migration conflict fixed above — this Secret must exist and be
-      # correct before the Deployment syncs:
-      #   kubectl -n gitea create secret generic gitea-admin-credentials \
-      #     --from-literal=username=gitadmin \
-      #     --from-literal=password='<the password you already set>'
+      # correct before the Deployment syncs.
+      #
+      # As of the Vault + External Secrets Operator migration, this Secret
+      # is no longer manually kubectl-created — it's managed by the
+      # ExternalSecret at devops-infra-argo-config/secretstores/gitea-admin-credentials.yaml,
+      # sourced from Vault path secret/gitea/admin. Rotate the password via
+      # `vault kv put secret/gitea/admin ...`, not kubectl, from here on.
      existingSecret: gitea-admin-credentials
      email: "admin@local.lab"