modified: deploy/act-runners/kb/deploy/app/secrets.yaml

deploy/act-runners/kb/README.md

@@ -1,13 +0,0 @@
-# kb - act-runner
-
-**Deploy app:**
-
-```bash
-./ops-scripts/apply-app.sh
-```
-
-**Deploy Infra:**
-
-```bash
-./ops-scripts/apply-infra.sh
-```

deploy/act-runners/kb/deploy/app/.env.d/.gitignore

@@ -1,2 +0,0 @@
-**
-!.gitignore

deploy/act-runners/kb/deploy/app/kustomization.yaml

@@ -1,14 +1,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+namespace: kb-cicd 
 resources:
   - configmap.yaml
   - deployment.yaml
-
-generatorOptions:
-  disableNameSuffixHash: true
-
-secretGenerator:
-  - name: act-runner
-    envs: 
-      - .env.d/.env
-
+  - secrets.yaml

deploy/act-runners/kb/deploy/app/secrets.yaml

@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: act-runner
+type: Opaque
+data:
+    GITEA_INSTANCE_URL: ENC[AES256_GCM,data:4TKctXyD4X9E8gJJHt9WI30w7bDxEzDMncRX/Ddr,iv:MeTSf+Nbfr0ERJg2RmIzTdXG/0yrCGKtMCEUTIGNlo4=,tag:zViPlFCXecj9dYX8i0duxA==,type:str]
+    GITEA_RUNNER_NAME: ENC[AES256_GCM,data:0GvSAV4w4Z4DF2qr,iv:3bRGeouS0j8FH4qBJXawzkcT34wUJwH+kfQOH18Xr+8=,tag:7IEf+iR7cgKvgAuwh+ttGQ==,type:str]
+    GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:/pRPj8K35WTIUDSyswwOCFN+iZN4itBJkQYCvyxiJZqW6c/1PBc8/w==,iv:i0l/qDoQYIomRhQqBkvsUfhaS5ao3HlxxHGe0sU9Fkc=,tag:SLlv7SG1J6OdJ5/HINBX9w==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrMzMzWE9OVDZqRjhtemhM
+            NHNCWFkrQm1kMmRwSlhhM3k0MEZyVzJudEJBCkZWaVpnbHBQaXhnT1dSWktubnox
+            NkY5cHBCK2liM0xIbGVIK09JOG5IcUkKLS0tIGVLQnBSZnBQU1Jreld6ZExnS3Zz
+            Mi9YTWM0b1dpVGJwcEwrSlJRYTRFbnMKWScrnjaOYx32yxDEapYITrAaPHq8ghFE
+            Q+xdv6szmhkWYYN3TZC1MvySFD2BR8VMlK31VQ/RZ+YrKjm8SF/8oQ==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
+    encrypted_regex: ^(data|stringData)$
+    lastmodified: "2026-06-04T20:38:18Z"
+    mac: ENC[AES256_GCM,data:StxGbN+6B3YKLbG1ptfnpTV9aHiUA7N7VyKdvbUOkVXCs4u/1IKVuqbq0zeliM6bjHh4ZhNcCjKFMNvqlIGsxJVNp+BdjMuVkw8Zc3g9z9SfvbpEbR+k+HLdHhOR/rZ8TS2m/bAlwmp/qVFi05rEjrC0lFO6klXO4gdFYpSMbY0=,iv:ghRsTJiXV6L7coLUKS+0LH4RRhdDycOBReAX77Jqews=,tag:73oWt9QNZEaLYwnBRO6PhA==,type:str]
+    version: 3.13.1

deploy/act-runners/kb/ops-scripts/apply-app.sh

@@ -1,4 +0,0 @@
-#!/bin/bash
-set -e
-NAMESPACE=kb-cicd
-kubectl kustomize deploy/app | kubectl --namespace ${NAMESPACE} apply -f -

deploy/act-runners/kb/ops-scripts/apply-infra.sh

@@ -1,4 +0,0 @@
-#!/bin/bash
-set -e
-NAMESPACE=kb-cicd
-kubectl create namespace ${NAMESPACE} || true

deploy/flux/backups-sync.yaml

@@ -2,6 +2,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: backups
+  namespace: git-limbosolutions-com
 spec:
   interval: 1m
   sourceRef: