4 Commits

Include renames

Author	SHA1	Message	Date
Jeffrey	0177c73fa9	gitea: migrate to envFrom with per-container InfisicalSecrets ... Flat CR narrowed to recursive: false; it still serves the SMB mount credentials and the Actions runner token, which the runner Helm chart reads via existingSecret.	2026-08-24 00:20:29 +02:00
Jeffrey	3bec829396	infisical: repoint secret CRs at the rebuilt machine identity ... Also tracks the auth ServiceAccounts and RBAC in Git so a namespace rebuild restores Kubernetes auth on its own.	2026-08-23 20:08:28 +02:00
Jeffrey	1d026f8d57	infisical: migrate all InfisicalSecrets to Kubernetes auth; drop universal-auth secret	2026-07-16 21:18:47 +02:00
Jeffrey	c40577589d	Split manifests into infra/ and applications/	2026-06-21 12:23:20 +02:00