gitea-admin/talos-cluster
1
0
Fork 0
Code Issues Pull Requests 15 Actions Packages Projects Releases Wiki Activity

fix: align pelican backup ExternalSecret and CronJob env vars to actual Vault keys #123

Open
gitea-admin wants to merge 2 commits from orion/auto/fix-align-pelican-backup-externalsecret--1780406406524 into main
pull from: orion/auto/fix-align-pelican-backup-externalsecret--1780406406524
merge into: gitea-admin:main
Conversation 0 Commits 2 Files Changed 2
+81
gitea-admin commented 2026-06-02 13:20:07 +00:00
Owner
Copy Link
Copy Source

AI Reasoning

The pelican-panel-db Vault secret has DB_USER and DB_PASSWORD keys. The ExternalSecret was mapping username/password/database but database doesn't exist in Vault. Fixed: ExternalSecret now maps DB_USER/DB_PASSWORD to the K8s secret, and CronJob hardcodes PGDATABASE=panel (the actual database name in the Pelican stack).

Policy Verdict

👤 Human review required — ExternalSecrets / Vault references touch sensitive data paths

Operation type: secret-change

Proposed by ORION

## AI Reasoning The pelican-panel-db Vault secret has DB_USER and DB_PASSWORD keys. The ExternalSecret was mapping username/password/database but database doesn't exist in Vault. Fixed: ExternalSecret now maps DB_USER/DB_PASSWORD to the K8s secret, and CronJob hardcodes PGDATABASE=panel (the actual database name in the Pelican stack). --- ## Policy Verdict 👤 **Human review required** — ExternalSecrets / Vault references touch sensitive data paths *Operation type: `secret-change`* *Proposed by [ORION](https://github.com/richard-callis/orion-web)*
gitea-admin added 2 commits 2026-06-02 13:20:07 +00:00
fix: align pelican backup ExternalSecret and CronJob env vars to actual Vault keys f2d3796b28
fix: align pelican backup ExternalSecret and CronJob env vars to actual Vault keys
Validate Manifests / validate (pull_request) Failing after 2s
Details
13da754ba2
gitea-admin added 1 commit 2026-06-02 13:20:07 +00:00
fix: align pelican backup ExternalSecret and CronJob env vars to actual Vault keys f2d3796b28
gitea-admin added 1 commit 2026-06-02 13:20:07 +00:00
fix: align pelican backup ExternalSecret and CronJob env vars to actual Vault keys
Validate Manifests / validate (pull_request) Failing after 2s
Details
13da754ba2
Some checks are pending
Validate Manifests / validate (pull_request) Failing after 2s
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin orion/auto/fix-align-pelican-backup-externalsecret--1780406406524:orion/auto/fix-align-pelican-backup-externalsecret--1780406406524
git checkout orion/auto/fix-align-pelican-backup-externalsecret--1780406406524
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
gitea-admin
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: gitea-admin/talos-cluster#123
Delete Branch "orion/auto/fix-align-pelican-backup-externalsecret--1780406406524"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?