nest/k3s
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

nest-matrix-bot secret config

Browse source
This commit is contained in:
Astra Logical 2026-07-22 16:32:39 -04:00
parent 6c47622e40
commit 3da9d277d4
2 changed files with 20 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
services/nest-matrix-bot/nest-matrix-bot-deployment.yaml
View file

@ -43,24 +43,27 @@ spec:
- name: MATRIX_BOT_USER - name: MATRIX_BOT_USER
value: "@access-bot:starling.mynest.love" value: "@access-bot:starling.mynest.love"
- name: ADMIN_ROOM_ID - name: ADMIN_ROOM_ID
value: "!adminroomid:starling.mynest.love" value: "!qbQaOZhvYnHXEjDRSG:starling.mynest.love"
- name: ADMIN_MATRIX_IDS - name: ADMIN_MATRIX_IDS
value: "@nest:starling.mynest.love" value: "@nest:starling.mynest.love"
- name: KEYCLOAK_URL - name: KEYCLOAK_URL
value: "https://sso.mynest.love/" value: "https://sso.mynest.love/"
- name: KEYCLOAK_REALM - name: KEYCLOAK_REALM
value: "nest" value: "nest"
- name: KEYCLOAK_CLIENT_ID
value: "nest-matrix-bot"
# --- Sensitive Credentials from Vault-managed Secret --- # --- Sensitive Credentials from Vault-managed Secret ---
- name: MATRIX_BOT_PASSWORD - name: MATRIX_BOT_PASSWORD
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: matrix-bot-credentials name: matrix-bot-credentials
key: MATRIX_BOT_PASSWORD key: bot-pass
- name: KEYCLOAK_CLIENT_ID
valueFrom:
secretKeyRef:
name: matrix-bot-credentials
key: client-id
- name: KEYCLOAK_CLIENT_SECRET - name: KEYCLOAK_CLIENT_SECRET
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: matrix-bot-credentials name: matrix-bot-credentials
key: KEYCLOAK_CLIENT_SECRET key: client-secret

20
services/nest-matrix-bot/nest-matrix-bot-external-secret.yaml
View file

@ -1,4 +1,4 @@
apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: matrix-bot-credentials name: matrix-bot-credentials
@ -7,16 +7,20 @@ spec:
refreshInterval: 1h refreshInterval: 1h
secretStoreRef: secretStoreRef:
kind: ClusterSecretStore kind: ClusterSecretStore
name: vault-backend name: vault-external-secrets-store
target: target:
name: matrix-bot-credentials name: matrix-bot-credentials
creationPolicy: Owner creationPolicy: Owner
data: data:
- secretKey: MATRIX_BOT_PASSWORD - secretKey: bot-pass
remoteRef: remoteRef:
key: secret/data/nest/matrix-bot key: nest-matrix-bot
property: bot_password property: bot-pass
- secretKey: KEYCLOAK_CLIENT_SECRET - secretKey: client-id
remoteRef: remoteRef:
key: secret/data/nest/matrix-bot key: nest-matrix-bot
property: client_secret property: client-id
- secretKey: client-secret
remoteRef:
key: nest-matrix-bot
property: client-secret