mirror of
https://github.com/stackblitz-labs/bolt.diy
synced 2025-06-26 18:26:38 +00:00
db9a2c9292
- Add ExternalSecret for auth secrets (SESSION_SECRET, GitHub OAuth) via AWS Secrets Manager - Separate user-configurable provider API keys into dedicated K8s Secret - Update deployment to use three-layer configuration model: * ConfigMap: non-sensitive public settings * ExternalSecret → Secret: infrastructure auth secrets from AWS * Secret: user-configurable provider API keys managed via UI - Add comprehensive documentation for AWS Secrets Manager setup - Include K8s deployment architecture guide with troubleshooting commands - Enable secure, auditable, and rotatable secrets management for production This follows enterprise security best practices with proper separation of concerns between infrastructure and user secrets. |
||
|---|---|---|
| .. | ||
| argocd | ||
| backup | ||
| configmap.yaml | ||
| deployment.yaml | ||
| external-secret.yaml | ||
| ingress.yaml | ||
| irsa-serviceaccount.yaml | ||
| namespace.yaml | ||
| service.yaml | ||