From c847b22014e15edab92b8b20c028817aa1d53ef1 Mon Sep 17 00:00:00 2001
From: Will Anderson <will@neuralplatform.ai>
Date: Sat, 25 Apr 2026 01:20:28 -0500
Subject: [PATCH] fix(secrets): add R2 credentials to neuron-prod
 ExternalSecret

License service references NEURON_R2_ENDPOINT/ACCESS_KEY/SECRET_KEY
but these were missing from neuron-prod-secrets. Pull from secret/r2
in Vault.
---
 .../neuron-technologies/prod/externalsecret.yaml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/servers/legion/k8s/neuron-technologies/prod/externalsecret.yaml b/servers/legion/k8s/neuron-technologies/prod/externalsecret.yaml
index 5978a88..2d2e999 100644
--- a/servers/legion/k8s/neuron-technologies/prod/externalsecret.yaml
+++ b/servers/legion/k8s/neuron-technologies/prod/externalsecret.yaml
@@ -32,3 +32,19 @@ spec:
       remoteRef:
         key: secret/data/neuron-technologies/unkey
         property: api_id
+    - secretKey: NEURON_R2_ENDPOINT
+      remoteRef:
+        key: secret/data/r2
+        property: endpoint
+    - secretKey: NEURON_R2_ACCESS_KEY
+      remoteRef:
+        key: secret/data/r2
+        property: access_key_id
+    - secretKey: NEURON_R2_SECRET_KEY
+      remoteRef:
+        key: secret/data/r2
+        property: secret_access_key
+    - secretKey: NEURON_R2_BUCKET
+      remoteRef:
+        key: secret/data/r2
+        property: neuron_bucket