agatha
bf27c97deb
Adds complete k8s/ manifest tree: Namespace, VaultAuth + VaultStaticSecret CRDs (VSO secret sync from Vault KV v2), API and UI Deployments and Services, nginx Ingress with cert-manager TLS, MinIO StatefulSet with PVC and init Job, and Alembic init container on the API Deployment for automatic schema migrations. Includes .yamllint.yml config and validate-k8s Makefile target. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
19 lines
484 B
YAML
19 lines
484 B
YAML
apiVersion: secrets.hashicorp.com/v1beta1
|
|
kind: VaultStaticSecret
|
|
metadata:
|
|
name: api-secret
|
|
namespace: reactbin
|
|
spec:
|
|
vaultAuthRef: reactbin-auth
|
|
mount: secret
|
|
type: kv-v2
|
|
# Required Vault keys at this path:
|
|
# DATABASE_URL, JWT_SECRET_KEY, OWNER_USERNAME, OWNER_PASSWORD,
|
|
# S3_ENDPOINT_URL, S3_BUCKET_NAME, S3_ACCESS_KEY_ID, S3_SECRET_ACCESS_KEY,
|
|
# API_BASE_URL
|
|
path: reactbin/api/config
|
|
refreshAfter: 1h
|
|
destination:
|
|
name: api-env
|
|
create: true
|