gotify: migrate to envFrom with per-container InfisicalSecrets

Stores the fully assembled database DSN in Infisical instead of building it from three helper vars with $() interpolation, which envFrom cannot feed.
2026-08-23 23:38:16 +02:00
parent f382c87f58
commit 3c24cd4b9d
7 changed files with 74 additions and 85 deletions
@@ -1,24 +0,0 @@
-apiVersion: secrets.infisical.com/v1alpha1
-kind: InfisicalSecret
-metadata:
-  name: gotify-secrets
-  namespace: infisical
-spec:
-  hostAPI: https://infisical.jsme.be
-  resyncInterval: 30
-  authentication:
-    kubernetesAuth:
-      identityId: "5458def7-7c63-40d2-95da-41c614d0933a"
-      serviceAccountRef:
-        name: infisical-auth
-        namespace: infisical
-      autoCreateServiceAccountToken: true
-      secretsScope:
-        projectSlug: "kubernetes"
-        envSlug: "prod"
-        secretsPath: "/gotify"
-        recursive: true
-  managedSecretReference:
-    secretName: gotify-secrets
-    secretNamespace: gotify
-    secretType: Opaque