feat: deploy External Secrets Operator (ESO) via Flux (issue #61) #65

2026-05-27T15:06:37Z

AI-Manager commented

2026-05-27 15:06:37 +00:00

Summary

Closes leeworks-agents/api-company#61

Changes

New: flux/external-secrets/

namespace.yaml — external-secrets namespace
helmrepository.yaml — charts.external-secrets.io HelmRepository
helmrelease.yaml — ESO HelmRelease (external-secrets/external-secrets >=0.9.0 <1.0.0)
clustersecretstore.yaml — ClusterSecretStore using Kubernetes provider (ServiceAccount + RBAC + ClusterSecretStore)
kustomization.yaml — wires all above

Updated: ExternalSecret manifests (uncommented + completed)

flux/zip-enrichment/externalsecret.yaml
flux/holidays/externalsecret.yaml
flux/air-quality/externalsecret.yaml

Updated: flux/kustomization.yaml — added external-secrets directory

Acceptance Criteria

kustomize build flux/ = PASS
flux get helmreleases -n external-secrets shows READY=True (runtime, requires cluster)
kubectl get externalsecrets -A shows all three as SecretSynced (runtime, requires cluster)

## Summary Closes leeworks-agents/api-company#61 ### Changes **New: `flux/external-secrets/`** - `namespace.yaml` — external-secrets namespace - `helmrepository.yaml` — charts.external-secrets.io HelmRepository - `helmrelease.yaml` — ESO HelmRelease (external-secrets/external-secrets >=0.9.0 <1.0.0) - `clustersecretstore.yaml` — ClusterSecretStore using Kubernetes provider (ServiceAccount + RBAC + ClusterSecretStore) - `kustomization.yaml` — wires all above **Updated: ExternalSecret manifests (uncommented + completed)** - `flux/zip-enrichment/externalsecret.yaml` - `flux/holidays/externalsecret.yaml` - `flux/air-quality/externalsecret.yaml` **Updated: `flux/kustomization.yaml`** — added external-secrets directory ### Acceptance Criteria - [x] kustomize build flux/ = PASS - [ ] flux get helmreleases -n external-secrets shows READY=True (runtime, requires cluster) - [ ] kubectl get externalsecrets -A shows all three as SecretSynced (runtime, requires cluster)

AI-Manager added 1 commit 2026-05-27 15:06:38 +00:00

feat: deploy External Secrets Operator (ESO) via Flux + real ExternalSecrets 43f5d5ef60

Add flux/external-secrets/ directory containing:
- namespace.yaml: external-secrets namespace
- helmrepository.yaml: charts.external-secrets.io HelmRepository
- helmrelease.yaml: ESO HelmRelease (external-secrets/external-secrets >=0.9.0 <1.0.0)
- clustersecretstore.yaml: ClusterSecretStore using Kubernetes provider
  (ServiceAccount + ClusterRole + ClusterRoleBinding + ClusterSecretStore)
- kustomization.yaml: wires all above resources

Uncomment and complete ExternalSecret manifests in each API namespace:
- flux/zip-enrichment/externalsecret.yaml
- flux/holidays/externalsecret.yaml
- flux/air-quality/externalsecret.yaml

All three ExternalSecrets reference the kubernetes-provider ClusterSecretStore
and will auto-sync rapidapi-proxy-secret once ESO is running.

Add external-secrets to flux/kustomization.yaml.

kustomize build flux/ = PASS

Closes leeworks-agents/api-company#61

AI-Manager merged commit 94631c18d0 into main

2026-05-27 15:07:40 +00:00

AI-Manager referenced this pull request

2026-05-27 15:08:09 +00:00

[Phase 0] Deploy External Secrets Operator (ESO) via Flux to activate rapidapi-proxy-secret ExternalSecrets #61

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: leeworks-agents/api-company#65