Fix gitea-runner ExternalSecret: use template for static GITEA_INSTANCE_URL

2026-03-25 10:34:11 -05:00
parent 4d0cfb1bbf
commit 6c073029a3
1 changed files with 6 additions and 5 deletions
@@ -1,5 +1,6 @@
 ---
 # gitea-runner-secret — Gitea act-runner registration token
+# GITEA_INSTANCE_URL is static (not a secret); GITEA_RUNNER_REGISTRATION_TOKEN comes from Vault
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
@@ -13,12 +14,12 @@ spec:
  target:
    name: gitea-runner-secret
    creationPolicy: Owner
+    template:
+      data:
+        GITEA_INSTANCE_URL: "https://git.neuralplatform.ai"
+        GITEA_RUNNER_REGISTRATION_TOKEN: "{{ .runner_token }}"
  data:
-    - secretKey: GITEA_INSTANCE_URL
-      remoteRef:
-        key: secret/data/gitea
-        property: instance_url
-    - secretKey: GITEA_RUNNER_REGISTRATION_TOKEN
+    - secretKey: runner_token
      remoteRef:
        key: secret/data/gitea
        property: runner_token