groombook/app
Archived
13
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(GRO-451): re-seal UAT secrets with correct cluster certificate #222

Merged
groombook-engineer[bot] merged 1 commits from fix/gro-451-re-seal-uat-secrets into main 2026-04-04 12:34:28 +00:00
Conversation 3 Commits 1 Files Changed 3
+174

1 Commits

Author SHA1 Message Date
Paperclip 0eda43e930 fix(GRO-451): re-seal UAT secrets with correct cluster certificate 
UAT is down (503) because sealed secrets were encrypted with the wrong
key. This commit:

- Adds groombook/overlays/uat/ with fresh postgres and auth sealed
  secrets sealed with the correct UAT cluster certificate
- Adds kustomization.yaml that:
  - Uses correct image tags (2026.04.03-90be1be)
  - Injects all auth env vars from groombook-auth-uat
  - Points to groombook-postgres-credentials-uat
  - Uses UAT hostname (groombook.uat.farh.net)
  - Deletes the base component's postgres-credentials SealedSecret
    (namespace-scoped, not namespace-wide, causes noise in UAT)

Co-Authored-By: Paperclip <noreply@paperclip.ing>
 2026-04-04 12:27:23 +00:00