activity-core: ExternalSecret for llm-connect-provider-secrets via openbao-activity-core CSS (CCR-2026-0003)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-02 12:56:21 +02:00
parent 2ff9263f9c
commit dfd2ce7754
2 changed files with 22 additions and 0 deletions
--- a/deploy/k8s/activity-core-llm-connect/externalsecret.yaml
+++ b/deploy/k8s/activity-core-llm-connect/externalsecret.yaml
@@ -0,0 +1,21 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: llm-connect-provider-secrets
+  namespace: activity-core
+  labels:
+    app.kubernetes.io/name: llm-connect
+    app.kubernetes.io/part-of: railiance-gitops
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: openbao-activity-core
+  target:
+    name: llm-connect-provider-secrets
+    creationPolicy: Owner
+  data:
+    - secretKey: OPENROUTER_API_KEY
+      remoteRef:
+        key: platform/workloads/activity-core/llm-connect/llm-connect-provider-secrets
+        property: OPENROUTER_API_KEY
--- a/deploy/k8s/activity-core-llm-connect/kustomization.yaml
+++ b/deploy/k8s/activity-core-llm-connect/kustomization.yaml
@@ -5,3 +5,4 @@ resources:
  - deployment.yaml
  - service.yaml
  - networkpolicy.yaml
+  - externalsecret.yaml