Rotate SESSION_SECRET again

.gitea/workflows/ci.yaml

@@ -69,4 +69,4 @@ jobs:
         uses: docker/build-push-action@v5
         with:
           push: true
-          tags: git.kill0.net/ryanc/toy:latest
+          tags: git.kill0.net/ryanc/kipunji:latest

kustomize/app/configmap.yaml

@@ -2,8 +2,8 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: toy-configmap
+  name: kipunji-configmap
-  namespace: toy
+  namespace: kipunji
   annotations:
     reloader.stakater.com/match: "true"
 data:

kustomize/app/ingress.yaml

@@ -2,7 +2,7 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: toy-ingress
+  name: kipunji-ingress
 spec:
   rules:
     - http:
@@ -11,6 +11,6 @@ spec:
             pathType: Prefix
             backend:
               service:
-                name: toy
+                name: kipunji
                 port:
                   name: web

kustomize/app/kustomization.yaml

@@ -1,7 +1,7 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: toy
+namespace: kipunji
 resources:
   - secret.yaml
   - configmap.yaml

kustomize/app/rollout.yaml

@@ -2,7 +2,7 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Rollout
 metadata:
-  name: toy
+  name: kipunji
   annotations:
     reloader.stakater.com/auto: "true"
 spec:
@@ -21,15 +21,15 @@ spec:
   revisionHistoryLimit: 2
   selector:
     matchLabels:
-      app: toy
+      app: kipunji
   template:
     metadata:
       labels:
-        app: toy
+        app: kipunji
     spec:
       containers:
-        - name: toy
+        - name: kipunji
-          image: git.kill0.net/ryanc/toy:latest
+          image: git.kill0.net/ryanc/kipunji:latest
           imagePullPolicy: Always
           ports:
             - name: web
@@ -38,12 +38,12 @@ spec:
             - name: SESSION_SECRET
               valueFrom:
                 secretKeyRef:
-                  name: toy-session-secret
+                  name: kipunji-session-secret
                   key: session_secret
                   optional: true
           envFrom:
             - configMapRef:
-                name: toy-configmap
+                name: kipunji-configmap
           livenessProbe:
             httpGet:
               path: /livez

kustomize/app/secret.yaml

@@ -3,15 +3,15 @@ apiVersion: bitnami.com/v1alpha1
 kind: SealedSecret
 metadata:
   creationTimestamp: null
-  name: toy-session-secret
+  name: kipunji-session-secret
-  namespace: toy
+  namespace: kipunji
   annotations:
     reloader.stakater.com/match: "true"
 spec:
   encryptedData:
-    session_secret: AgBTxKU1zmMUNAUi9zR8bBby/u7voCe9axQgtNP9naE4Jhb8cGORCOuhT7EwUNZUc0gYf8XE56EeZQx9fl/m7IPr34dkC7IK22ZAG391PUBsj7gKYdBRL+s7hqH2s02eY3EIw45lWWjjdEmEizenFmqKpD0zD/UZFps1oRUnJ8Fry/wmfpNsapyb3J5fMC1p/SlJAFAEbGe+BKhjyIxAgHbizL510X1fGvS7LGgUQR4ePnX8Xmi1ubM8PeQOX0tRZwdw+AT8hm1eUd9KSw1PwlcF/xzrGHb7Pw5zTwoa9p1H9+nv80SyNdKxgWvwFj0+GThbOc3wiF1ENVyZmxZo/Y5SyHs7QpATvy23f253aC67nmTz5FU2KkmfqO8hGhdsrxIdQo/iMZq/SVABX4FgbrbKi70dRMe4SWRD1albqp4h/e2asBMPyzS+L27m6zD8BMZ+J9sQGyjAzzkADS5xG9UAF78fXZXJmPbNxCq92FFINHK98np3ucP+VdDBMyfOeKH8ieBR/qfakWRHnVQVsR+hnwdRS0CMixw7wB6RQw/JCAXKiwKVvvmVVXZzpNucuTesFClYNTxRKhPBHtiyXEPDaHpi7PghQB81wDcY0T9u6HYjGl4udA0friiN1CmUGO8e5FtkQ4eiMe+SIB3oCXNGWErMpMkHIRdt4rdP08rZ2m4GG3MKtQlBKM4MHfcKvke4tkLmeAItMTl2qNd283xaeabO0lG9yh0fuYuaNbqvYNt8TCprLWVb+ynrqbHn4E0SeoRT+vjGSR9K9N+iLkv6GCjDhiw+TrQ4QArYHI3CS2SeY4oIOe2HUP3jyjSh4r6jH1+n3elJG/eb+GQ9nlC4xKqXE+wwx+7s850nMifcDuk=
+    session_secret: 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
   template:
     metadata:
       creationTimestamp: null
-      name: toy-session-secret
+      name: kipunji-session-secret
-      namespace: toy
+      namespace: kipunji

kustomize/app/services.yaml

@@ -2,7 +2,7 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: toy
+  name: kipunji
 
 spec:
   ports:
@@ -10,4 +10,4 @@ spec:
       port: 80
       targetPort: web
   selector:
-    app: toy
+    app: kipunji

kustomize/kustomization.yaml

@@ -1,7 +1,7 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: toy
+namespace: kipunji
 resources:
   - namespace.yaml
   - ./app

kustomize/memcached/deployment.yaml

@@ -2,19 +2,19 @@
 kind: Deployment
 apiVersion: apps/v1
 metadata:
-  name: toy-memcached
+  name: kipunji-memcached
 
 spec:
   selector:
     matchLabels:
-      app: toy-memcached
+      app: kipunji-memcached
   template:
     metadata:
       labels:
-        app: toy-memcached
+        app: kipunji-memcached
     spec:
       containers:
-        - name: toy-memcached
+        - name: kipunji-memcached
           image: memcached:latest
           ports:
             - name: memcached

kustomize/memcached/kustomization.yaml

@@ -1,7 +1,7 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: toy
+namespace: kipunji
 resources:
   - deployment.yaml
   - services.yaml

kustomize/memcached/services.yaml

@@ -2,7 +2,7 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: toy-memcached
+  name: kipunji-memcached
 
 spec:
   ports:
@@ -10,4 +10,4 @@ spec:
       port: 11211
       targetPort: memcached
   selector:
-    app: toy-memcached
+    app: kipunji-memcached

kustomize/namespace.yaml

@@ -2,5 +2,5 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: toy
+  name: kipunji