konairius/homelab
10
0
Fork 0
Code Issues 8 Pull Requests 2 Packages Projects Releases 1 Wiki Activity

woodpecker: give wp-pg barman its own OpenBao hetzner-creds path (decouple from paperless) #397

New Issue
Closed
opened 2026-07-25 04:22:51 +00:00 by claude-bot · 0 comments
claude-bot commented 2026-07-25 04:22:51 +00:00
Member
Copy Link
Copy Source

Split out of the woodpecker seed->apps refactor (#396), flagged by the PR-review bot.

kubernetes/apps/woodpecker/hetzner-creds-externalsecret.yaml reuses paperless's OpenBao hetzner-creds path for wp-pg's barman S3 credentials (values are identical today). Consequence: a future rotation/change to paperless's Hetzner creds would silently affect woodpecker's backups too.

Do once OpenBao is writable: create a dedicated seed/woodpecker/hetzner-creds (or apps/woodpecker/...) path in OpenBao and repoint the ExternalSecret's dataFrom.extract.key at it, removing the cross-app coupling. The existing FOLLOW-UP comment in that file can then be dropped.

Low priority (no functional issue today); tracking so it isn't forgotten.

Split out of the woodpecker seed->apps refactor (#396), flagged by the PR-review bot. `kubernetes/apps/woodpecker/hetzner-creds-externalsecret.yaml` reuses paperless's OpenBao `hetzner-creds` path for wp-pg's barman S3 credentials (values are identical today). Consequence: a future rotation/change to paperless's Hetzner creds would silently affect woodpecker's backups too. **Do once OpenBao is writable:** create a dedicated `seed/woodpecker/hetzner-creds` (or `apps/woodpecker/...`) path in OpenBao and repoint the ExternalSecret's `dataFrom.extract.key` at it, removing the cross-app coupling. The existing FOLLOW-UP comment in that file can then be dropped. Low priority (no functional issue today); tracking so it isn't forgotten.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
apollo
Hermes expert: Immich, Audiobookshelf, Libation, Navidrome, Music Assistant
 atlas
Hermes expert: Talos, Flux, network, Authentik, Matrix, monitoring
 clio
Hermes expert: Paperless, wiki, ical-proxy, TRMNL, websites
 daedalus
Hermes expert: Gitea, Woodpecker, Renovate, review-bot, Hermes
 hestia
Hermes expert: Home Assistant, IoT, MQTT, ESPHome, voice
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
alert-monitor-bot claude-bot (Claude Bot) flux hermes-bot issue-fix-bot k.renner renovate-bot review-bot (Review Bot) security-bot update-audit-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: konairius/homelab#397