feat: refactor apps

2026-04-07 20:20:01 -05:00
parent 6825615229
commit 1ce8f18df7
20 changed files with 52 additions and 316 deletions
--- a/clusters/cl01tl/helm/vault/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/vault/templates/external-secret.yaml
@@ -14,17 +14,11 @@ spec:
  data:
    - secretKey: VAULT_APPROLE_ROLE_ID
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/snapshot
-        metadataPolicy: None
        property: VAULT_APPROLE_ROLE_ID
    - secretKey: VAULT_APPROLE_SECRET_ID
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/snapshot
-        metadataPolicy: None
        property: VAULT_APPROLE_SECRET_ID

 ---
@@ -44,17 +38,11 @@ spec:
  data:
    - secretKey: .s3cfg
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /garage/home-infra/vault-backups
-        metadataPolicy: None
        property: s3cfg-local
    - secretKey: BUCKET
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /garage/home-infra/vault-backups
-        metadataPolicy: None
        property: BUCKET

 ---
@@ -74,17 +62,11 @@ spec:
  data:
    - secretKey: .s3cfg
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /garage/home-infra/vault-backups
-        metadataPolicy: None
        property: s3cfg-remote
    - secretKey: BUCKET
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /garage/home-infra/vault-backups
-        metadataPolicy: None
        property: BUCKET

 ---
@@ -104,17 +86,11 @@ spec:
  data:
    - secretKey: .s3cfg
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /digital-ocean/home-infra/vault-backup
-        metadataPolicy: None
        property: s3cfg
    - secretKey: BUCKET
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /digital-ocean/home-infra/vault-backup
-        metadataPolicy: None
        property: BUCKET

 ---
@@ -134,24 +110,15 @@ spec:
  data:
    - secretKey: NTFY_TOKEN
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /ntfy/user/cl01tl
-        metadataPolicy: None
        property: token
    - secretKey: NTFY_ENDPOINT
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /ntfy/user/cl01tl
-        metadataPolicy: None
        property: endpoint
    - secretKey: NTFY_TOPIC
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/snapshot
-        metadataPolicy: None
        property: NTFY_TOPIC

 ---
@@ -171,66 +138,39 @@ spec:
  data:
    - secretKey: ENVIRONMENT
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-1
-        metadataPolicy: None
        property: ENVIRONMENT
    - secretKey: CHECK_INTERVAL
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-1
-        metadataPolicy: None
        property: CHECK_INTERVAL
    - secretKey: MAX_CHECK_INTERVAL
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-1
-        metadataPolicy: None
        property: MAX_CHECK_INTERVAL
    - secretKey: NODES
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-1
-        metadataPolicy: None
        property: NODES
    - secretKey: TLS_SKIP_VERIFY
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-1
-        metadataPolicy: None
        property: TLS_SKIP_VERIFY
    - secretKey: TOKENS
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-1
-        metadataPolicy: None
        property: TOKENS
    - secretKey: EMAIL_ENABLED
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-1
-        metadataPolicy: None
        property: EMAIL_ENABLED
    - secretKey: NOTIFY_MAX_ELAPSED
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-1
-        metadataPolicy: None
        property: NOTIFY_MAX_ELAPSED
    - secretKey: NOTIFY_QUEUE_DELAY
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-1
-        metadataPolicy: None
        property: NOTIFY_QUEUE_DELAY

 ---
@@ -250,66 +190,39 @@ spec:
  data:
    - secretKey: ENVIRONMENT
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-2
-        metadataPolicy: None
        property: ENVIRONMENT
    - secretKey: CHECK_INTERVAL
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-2
-        metadataPolicy: None
        property: CHECK_INTERVAL
    - secretKey: MAX_CHECK_INTERVAL
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-2
-        metadataPolicy: None
        property: MAX_CHECK_INTERVAL
    - secretKey: NODES
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-2
-        metadataPolicy: None
        property: NODES
    - secretKey: TLS_SKIP_VERIFY
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-2
-        metadataPolicy: None
        property: TLS_SKIP_VERIFY
    - secretKey: TOKENS
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-2
-        metadataPolicy: None
        property: TOKENS
    - secretKey: EMAIL_ENABLED
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-2
-        metadataPolicy: None
        property: EMAIL_ENABLED
    - secretKey: NOTIFY_MAX_ELAPSED
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-2
-        metadataPolicy: None
        property: NOTIFY_MAX_ELAPSED
    - secretKey: NOTIFY_QUEUE_DELAY
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-2
-        metadataPolicy: None
        property: NOTIFY_QUEUE_DELAY

 ---
@@ -329,66 +242,39 @@ spec:
  data:
    - secretKey: ENVIRONMENT
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-3
-        metadataPolicy: None
        property: ENVIRONMENT
    - secretKey: CHECK_INTERVAL
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-3
-        metadataPolicy: None
        property: CHECK_INTERVAL
    - secretKey: MAX_CHECK_INTERVAL
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-3
-        metadataPolicy: None
        property: MAX_CHECK_INTERVAL
    - secretKey: NODES
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-3
-        metadataPolicy: None
        property: NODES
    - secretKey: TLS_SKIP_VERIFY
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-3
-        metadataPolicy: None
        property: TLS_SKIP_VERIFY
    - secretKey: TOKENS
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-3
-        metadataPolicy: None
        property: TOKENS
    - secretKey: EMAIL_ENABLED
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-3
-        metadataPolicy: None
        property: EMAIL_ENABLED
    - secretKey: NOTIFY_MAX_ELAPSED
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-3
-        metadataPolicy: None
        property: NOTIFY_MAX_ELAPSED
    - secretKey: NOTIFY_QUEUE_DELAY
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/unseal/config-3
-        metadataPolicy: None
        property: NOTIFY_QUEUE_DELAY

 ---
@@ -408,43 +294,25 @@ spec:
  data:
    - secretKey: token
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/token
-        metadataPolicy: None
        property: token
    - secretKey: unseal_key_1
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/token
-        metadataPolicy: None
        property: unseal_key_1
    - secretKey: unseal_key_2
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/token
-        metadataPolicy: None
        property: unseal_key_2
    - secretKey: unseal_key_3
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/token
-        metadataPolicy: None
        property: unseal_key_3
    - secretKey: unseal_key_4
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/token
-        metadataPolicy: None
        property: unseal_key_4
    - secretKey: unseal_key_5
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/vault/token
-        metadataPolicy: None
        property: unseal_key_5
--- a/clusters/cl01tl/helm/vault/templates/http-route.yaml
+++ b/clusters/cl01tl/helm/vault/templates/http-route.yaml
@@ -25,4 +25,3 @@ spec:
          kind: Service
          name: vault-active
          port: 8200
-          weight: 100