From b86b3bf1a88ec3b15b38f12253277fac7e998013 Mon Sep 17 00:00:00 2001 From: gitea-bot Date: Fri, 24 Apr 2026 16:09:58 +0000 Subject: [PATCH] chore: Update manifests after change --- ...Secret-alertmanager-kube-prometheus-stack-alertmanager.yaml | 2 +- .../cl01tl/manifests/roundcube/CronJob-roundcube-cleandb.yaml | 2 +- .../SecretProviderClass-talos-etcd-backup-external-config.yaml | 2 +- .../SecretProviderClass-talos-etcd-backup-local-config.yaml | 2 +- .../SecretProviderClass-talos-etcd-backup-remote-config.yaml | 2 +- .../talos/SecretProviderClass-talos-etcd-defrag-config.yaml | 2 +- clusters/cl01tl/manifests/vault/CronJob-vault-snapshot.yaml | 2 +- .../SecretProviderClass-vault-backup-external-config.yaml | 2 +- .../vault/SecretProviderClass-vault-backup-local-config.yaml | 2 +- .../vault/SecretProviderClass-vault-backup-remote-config.yaml | 2 +- clusters/cl01tl/manifests/vault/ServiceAccount-vault.yaml | 3 +-- 11 files changed, 11 insertions(+), 12 deletions(-) diff --git a/clusters/cl01tl/manifests/kube-prometheus-stack/Secret-alertmanager-kube-prometheus-stack-alertmanager.yaml b/clusters/cl01tl/manifests/kube-prometheus-stack/Secret-alertmanager-kube-prometheus-stack-alertmanager.yaml index 3f1cdf51e..41364e9b3 100644 --- a/clusters/cl01tl/manifests/kube-prometheus-stack/Secret-alertmanager-kube-prometheus-stack-alertmanager.yaml +++ b/clusters/cl01tl/manifests/kube-prometheus-stack/Secret-alertmanager-kube-prometheus-stack-alertmanager.yaml @@ -13,4 +13,4 @@ metadata: release: "kube-prometheus-stack" heritage: "Helm" data: - alertmanager.yaml: "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" + alertmanager.yaml: "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" diff --git a/clusters/cl01tl/manifests/roundcube/CronJob-roundcube-cleandb.yaml b/clusters/cl01tl/manifests/roundcube/CronJob-roundcube-cleandb.yaml index 13c6174cb..d6cc7e3f8 100644 --- a/clusters/cl01tl/manifests/roundcube/CronJob-roundcube-cleandb.yaml +++ b/clusters/cl01tl/manifests/roundcube/CronJob-roundcube-cleandb.yaml @@ -68,7 +68,7 @@ spec: valueFrom: secretKeyRef: key: DES_KEY - name: roundcube-key-secret + name: roundcube-key - name: ROUNDCUBEMAIL_DEFAULT_HOST value: tls://stalwart.stalwart - name: ROUNDCUBEMAIL_SMTP_SERVER diff --git a/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-external-config.yaml b/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-external-config.yaml index a2d2ec155..87f57bc59 100644 --- a/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-external-config.yaml +++ b/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-external-config.yaml @@ -11,7 +11,7 @@ spec: provider: openbao parameters: baoAddress: "http://openbao-internal.openbao:8200" - roleName: slskd + roleName: talos-backup-secrets objects: | - objectName: .s3cfg fileName: .s3cfg diff --git a/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-local-config.yaml b/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-local-config.yaml index bec42fa39..8a4235817 100644 --- a/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-local-config.yaml +++ b/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-local-config.yaml @@ -11,7 +11,7 @@ spec: provider: openbao parameters: baoAddress: "http://openbao-internal.openbao:8200" - roleName: slskd + roleName: talos-backup-secrets objects: | - objectName: .s3cfg fileName: .s3cfg diff --git a/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-remote-config.yaml b/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-remote-config.yaml index 168a36255..9fd72a2a2 100644 --- a/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-remote-config.yaml +++ b/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-backup-remote-config.yaml @@ -11,7 +11,7 @@ spec: provider: openbao parameters: baoAddress: "http://openbao-internal.openbao:8200" - roleName: slskd + roleName: talos-backup-secrets objects: | - objectName: .s3cfg fileName: .s3cfg diff --git a/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-defrag-config.yaml b/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-defrag-config.yaml index ac13a695b..49787d21e 100644 --- a/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-defrag-config.yaml +++ b/clusters/cl01tl/manifests/talos/SecretProviderClass-talos-etcd-defrag-config.yaml @@ -11,7 +11,7 @@ spec: provider: openbao parameters: baoAddress: "http://openbao-internal.openbao:8200" - roleName: slskd + roleName: talos-backup-secrets objects: | - objectName: config fileName: config diff --git a/clusters/cl01tl/manifests/vault/CronJob-vault-snapshot.yaml b/clusters/cl01tl/manifests/vault/CronJob-vault-snapshot.yaml index a39474740..3386439b5 100644 --- a/clusters/cl01tl/manifests/vault/CronJob-vault-snapshot.yaml +++ b/clusters/cl01tl/manifests/vault/CronJob-vault-snapshot.yaml @@ -29,7 +29,7 @@ spec: app.kubernetes.io/name: vault spec: enableServiceLinks: false - serviceAccountName: default + serviceAccountName: vault automountServiceAccountToken: true hostIPC: false hostNetwork: false diff --git a/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-external-config.yaml b/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-external-config.yaml index 0bff1d25c..b8823b566 100644 --- a/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-external-config.yaml +++ b/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-external-config.yaml @@ -11,7 +11,7 @@ spec: provider: openbao parameters: baoAddress: "http://openbao-internal.openbao:8200" - roleName: slskd + roleName: vault objects: | - objectName: .s3cfg fileName: .s3cfg diff --git a/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-local-config.yaml b/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-local-config.yaml index d6919e012..e9556ac83 100644 --- a/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-local-config.yaml +++ b/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-local-config.yaml @@ -11,7 +11,7 @@ spec: provider: openbao parameters: baoAddress: "http://openbao-internal.openbao:8200" - roleName: slskd + roleName: vault objects: | - objectName: .s3cfg fileName: .s3cfg diff --git a/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-remote-config.yaml b/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-remote-config.yaml index a3f2d7a2c..56c0a6a54 100644 --- a/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-remote-config.yaml +++ b/clusters/cl01tl/manifests/vault/SecretProviderClass-vault-backup-remote-config.yaml @@ -11,7 +11,7 @@ spec: provider: openbao parameters: baoAddress: "http://openbao-internal.openbao:8200" - roleName: slskd + roleName: vault objects: | - objectName: .s3cfg fileName: .s3cfg diff --git a/clusters/cl01tl/manifests/vault/ServiceAccount-vault.yaml b/clusters/cl01tl/manifests/vault/ServiceAccount-vault.yaml index f3a403d58..4fde6cdc6 100644 --- a/clusters/cl01tl/manifests/vault/ServiceAccount-vault.yaml +++ b/clusters/cl01tl/manifests/vault/ServiceAccount-vault.yaml @@ -4,7 +4,6 @@ metadata: name: vault namespace: vault labels: - helm.sh/chart: vault-0.32.0 app.kubernetes.io/name: vault app.kubernetes.io/instance: vault - app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: vault -- 2.49.1