From 3da9d277d4151b4898ac5109b990f678d9071dc8 Mon Sep 17 00:00:00 2001
From: Astra Logical <booksandpi@gmail.com>
Date: Wed, 22 Jul 2026 16:32:39 -0400
Subject: [PATCH] nest-matrix-bot secret config

---
 .../nest-matrix-bot-deployment.yaml           | 13 +++++++-----
 .../nest-matrix-bot-external-secret.yaml      | 20 +++++++++++--------
 2 files changed, 20 insertions(+), 13 deletions(-)

diff --git a/services/nest-matrix-bot/nest-matrix-bot-deployment.yaml b/services/nest-matrix-bot/nest-matrix-bot-deployment.yaml
index 3f5b82f..867a113 100644
--- a/services/nest-matrix-bot/nest-matrix-bot-deployment.yaml
+++ b/services/nest-matrix-bot/nest-matrix-bot-deployment.yaml
@@ -43,24 +43,27 @@ spec:
             - name: MATRIX_BOT_USER
               value: "@access-bot:starling.mynest.love"
             - name: ADMIN_ROOM_ID
-              value: "!adminroomid:starling.mynest.love"
+              value: "!qbQaOZhvYnHXEjDRSG:starling.mynest.love"
             - name: ADMIN_MATRIX_IDS
               value: "@nest:starling.mynest.love"
             - name: KEYCLOAK_URL
               value: "https://sso.mynest.love/"
             - name: KEYCLOAK_REALM
               value: "nest"
-            - name: KEYCLOAK_CLIENT_ID
-              value: "nest-matrix-bot"
 
             # --- Sensitive Credentials from Vault-managed Secret ---
             - name: MATRIX_BOT_PASSWORD
               valueFrom:
                 secretKeyRef:
                   name: matrix-bot-credentials
-                  key: MATRIX_BOT_PASSWORD
+                  key: bot-pass
+            - name: KEYCLOAK_CLIENT_ID
+              valueFrom:
+                secretKeyRef:
+                  name: matrix-bot-credentials
+                  key: client-id
             - name: KEYCLOAK_CLIENT_SECRET
               valueFrom:
                 secretKeyRef:
                   name: matrix-bot-credentials
-                  key: KEYCLOAK_CLIENT_SECRET
+                  key: client-secret
diff --git a/services/nest-matrix-bot/nest-matrix-bot-external-secret.yaml b/services/nest-matrix-bot/nest-matrix-bot-external-secret.yaml
index d05fc03..5230b88 100644
--- a/services/nest-matrix-bot/nest-matrix-bot-external-secret.yaml
+++ b/services/nest-matrix-bot/nest-matrix-bot-external-secret.yaml
@@ -1,4 +1,4 @@
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: matrix-bot-credentials
@@ -7,16 +7,20 @@ spec:
   refreshInterval: 1h
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault-backend
+    name: vault-external-secrets-store
   target:
     name: matrix-bot-credentials
     creationPolicy: Owner
   data:
-    - secretKey: MATRIX_BOT_PASSWORD
+    - secretKey: bot-pass
       remoteRef:
-        key: secret/data/nest/matrix-bot
-        property: bot_password
-    - secretKey: KEYCLOAK_CLIENT_SECRET
+        key: nest-matrix-bot
+        property: bot-pass
+    - secretKey: client-id
       remoteRef:
-        key: secret/data/nest/matrix-bot
-        property: client_secret
+        key: nest-matrix-bot
+        property: client-id
+    - secretKey: client-secret
+      remoteRef:
+        key: nest-matrix-bot
+        property: client-secret