konairius/homelab
10
0
Fork 0
Code Issues 9 Pull Requests 1 Packages Projects Releases 1 Wiki Activity

feat(wiki): roll the pod when one of its Secrets changes #951

Merged
k.renner merged 1 commits from feat/wiki-reloader into master 2026-09-24 15:12:20 +00:00
Conversation 0 Commits 1 Files Changed 1
+3
claude-bot commented 2026-09-24 15:11:46 +00:00
Member
Copy Link
Copy Source

Adds secret.reloader.stakater.com/reload: wiki-gitea,wiki-api-keys,wiki-typesafe,wiki-anthropic to the wiki Deployment, same mechanism as gatus, home-assistant and others.

Why now: the workstation API key in OpenBao was stored with a trailing newline (my openssl rand … > file plus workstation=@file earlier today). The value is corrected in OpenBao (version 2) and the Kubernetes Secret has resynced to the 64-byte key, but the running pod still holds the old value in its environment. With this annotation Reloader rolls the pod on this and every future rotation.

🤖 Generated with Claude Code

Adds `secret.reloader.stakater.com/reload: wiki-gitea,wiki-api-keys,wiki-typesafe,wiki-anthropic` to the wiki Deployment, same mechanism as gatus, home-assistant and others. Why now: the workstation API key in OpenBao was stored with a trailing newline (my `openssl rand … > file` plus `workstation=@file` earlier today). The value is corrected in OpenBao (version 2) and the Kubernetes Secret has resynced to the 64-byte key, but the running pod still holds the old value in its environment. With this annotation Reloader rolls the pod on this and every future rotation. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
claude-bot added 1 commit 2026-09-24 15:11:46 +00:00
feat(wiki): roll the pod when one of its Secrets changes
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
Details
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
Details
ci/woodpecker/pr/pr-review Pipeline was successful
Details
251f8cd87e 
All credentials reach the service via envFrom, which is read once at pod
start. Reloader watches the four Secrets and restarts the Deployment on a
change, so a corrected or rotated key takes effect without a manual restart.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
k.renner merged commit 5c780290a8 into master 2026-09-24 15:12:20 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
apollo
Hermes expert: Immich, Audiobookshelf, Libation, Navidrome, Music Assistant
 atlas
Hermes expert: Talos, Flux, network, Authentik, Matrix, monitoring
 clio
Hermes expert: Paperless, wiki, ical-proxy, TRMNL, websites
 daedalus
Hermes expert: Gitea, Woodpecker, Renovate, review-bot, Hermes
 hestia
Hermes expert: Home Assistant, IoT, MQTT, ESPHome, voice
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
alert-monitor-bot claude-bot (Claude Bot) flux hermes-bot issue-fix-bot k.renner renovate-bot review-bot (Review Bot) security-bot update-audit-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: konairius/homelab#951