Files
mg4/k8s/secrets.example.yaml
T
nilsandClaude Opus 5.5 4fe29189c0 Pin the pushed server image; drop the pull secret
mg4-server:2.0.0 is on git.stinnesbeck.com and pulls anonymously, so
the Deployment no longer references a registry pull secret. The image
is pinned by digest (sha256:6feea777…) so a re-pushed tag cannot
change what the cluster runs. README and secrets template updated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QLJfZQZeAKAwSqViTmLzki
2026-10-17 16:14:53 +02:00

40 lines
1.1 KiB
YAML

# TEMPLATE ONLY — not part of kustomization.yaml. Copy it outside the repository, fill in
# real values, and apply that copy yourself. Never commit the filled-in file.
#
# openssl rand -hex 32 for every token and password below
apiVersion: v1
kind: Secret
metadata:
name: influxdb-auth
namespace: mg4
type: Opaque
stringData:
admin-password: CHANGE-ME-at-least-8-characters
admin-token: CHANGE-ME-openssl-rand-hex-32
---
apiVersion: v1
kind: Secret
metadata:
name: mg4-server
namespace: mg4
type: Opaque
stringData:
# The car's write token, entered in the app. At least 24 characters, or the server
# refuses to start.
INGEST_TOKEN: CHANGE-ME-openssl-rand-hex-32
# Your ABRP credentials. Leave either empty to switch forwarding off.
ABRP_API_KEY: CHANGE-ME
ABRP_USER_TOKEN: CHANGE-ME
ABRP_MIN_INTERVAL_SECONDS: "5"
---
apiVersion: v1
kind: Secret
metadata:
name: grafana-admin
namespace: mg4
type: Opaque
stringData:
# Grafana's admin login (user "admin"). Only read on first start: change it in Grafana
# afterwards, or reset it with grafana cli.
admin-password: CHANGE-ME