nest-matrix-bot secret config

services/nest-matrix-bot/nest-matrix-bot-deployment.yaml

@@ -43,24 +43,27 @@ spec:
             - name: MATRIX_BOT_USER
               value: "@access-bot:starling.mynest.love"
             - name: ADMIN_ROOM_ID
-              value: "!adminroomid:starling.mynest.love"
+              value: "!qbQaOZhvYnHXEjDRSG:starling.mynest.love"
             - name: ADMIN_MATRIX_IDS
               value: "@nest:starling.mynest.love"
             - name: KEYCLOAK_URL
               value: "https://sso.mynest.love/"
             - name: KEYCLOAK_REALM
               value: "nest"
-            - name: KEYCLOAK_CLIENT_ID
-              value: "nest-matrix-bot"
 
             # --- Sensitive Credentials from Vault-managed Secret ---
             - name: MATRIX_BOT_PASSWORD
               valueFrom:
                 secretKeyRef:
                   name: matrix-bot-credentials
-                  key: MATRIX_BOT_PASSWORD
+                  key: bot-pass
+            - name: KEYCLOAK_CLIENT_ID
+              valueFrom:
+                secretKeyRef:
+                  name: matrix-bot-credentials
+                  key: client-id
             - name: KEYCLOAK_CLIENT_SECRET
               valueFrom:
                 secretKeyRef:
                   name: matrix-bot-credentials
-                  key: KEYCLOAK_CLIENT_SECRET
+                  key: client-secret

services/nest-matrix-bot/nest-matrix-bot-external-secret.yaml

@@ -1,4 +1,4 @@
-apiVersion: external-secrets.io/v1beta1
+apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: matrix-bot-credentials
@@ -7,16 +7,20 @@ spec:
   refreshInterval: 1h
   secretStoreRef:
     kind: ClusterSecretStore
-    name: vault-backend
+    name: vault-external-secrets-store
   target:
     name: matrix-bot-credentials
     creationPolicy: Owner
   data:
-    - secretKey: MATRIX_BOT_PASSWORD
+    - secretKey: bot-pass
       remoteRef:
-        key: secret/data/nest/matrix-bot
-        property: bot_password
-    - secretKey: KEYCLOAK_CLIENT_SECRET
+        key: nest-matrix-bot
+        property: bot-pass
+    - secretKey: client-id
       remoteRef:
-        key: secret/data/nest/matrix-bot
-        property: client_secret
+        key: nest-matrix-bot
+        property: client-id
+    - secretKey: client-secret
+      remoteRef:
+        key: nest-matrix-bot
+        property: client-secret