added gitea secret to vault

This commit is contained in:
Mukul Sharma
2026-08-31 09:03:45 +05:30
parent 7faa3e415b
commit 5c0e7b04e3
@@ -73,10 +73,13 @@ gitea:
# pod (re)start, actively syncing the admin password from whatever # pod (re)start, actively syncing the admin password from whatever
# this env var resolves to. That's what caused the value->valueFrom # this env var resolves to. That's what caused the value->valueFrom
# migration conflict fixed above — this Secret must exist and be # migration conflict fixed above — this Secret must exist and be
# correct before the Deployment syncs: # correct before the Deployment syncs.
# kubectl -n gitea create secret generic gitea-admin-credentials \ #
# --from-literal=username=gitadmin \ # As of the Vault + External Secrets Operator migration, this Secret
# --from-literal=password='<the password you already set>' # is no longer manually kubectl-created — it's managed by the
# ExternalSecret at devops-infra-argo-config/secretstores/gitea-admin-credentials.yaml,
# sourced from Vault path secret/gitea/admin. Rotate the password via
# `vault kv put secret/gitea/admin ...`, not kubectl, from here on.
existingSecret: gitea-admin-credentials existingSecret: gitea-admin-credentials
email: "admin@local.lab" email: "admin@local.lab"