zipline: migrate to envFrom with per-container InfisicalSecrets

Flat CR narrowed to recursive: false so it keeps serving the SMB mount credentials that zipline-uploads-pv references by name.
2026-08-23 20:08:43 +02:00
parent 3bec829396
commit 14ef1c6e91
5 changed files with 60 additions and 27 deletions
@@ -8,7 +8,7 @@ spec:
  resyncInterval: 30
  authentication:
    kubernetesAuth:
-      identityId: "9f65814e-bf4c-42fc-b382-26be15b11416"
+      identityId: "5458def7-7c63-40d2-95da-41c614d0933a"
      serviceAccountRef:
        name: infisical-auth
        namespace: infisical
@@ -17,7 +17,9 @@ spec:
        projectSlug: "kubernetes"
        envSlug: "prod"
        secretsPath: "/zipline"
-        recursive: true
+        # Root only: /zipline holds the SMB mount credentials (username, password)
+        # consumed by zipline-uploads-pv. Per-container env lives in subfolders.
+        recursive: false
  managedSecretReference:
    secretName: zipline-secrets
    secretNamespace: zipline