stacks/build/secrets-backup/Dockerfile
Daniel Sy 81b721bb5a
Some checks failed
Build secrets-backup image / build-and-push (push) Failing after 3s
fix(secrets-backup): 🔥 remove client-side openssl encryption
OBS bucket has server-side KMS encryption. Client-side openssl was
redundant and caused failures (Alpine CDN unreachable at 03:30 UTC).

Changes:
- Dockerfile: remove openssl apk install (no longer needed)
- CronJob: remove openssl enc step, upload .tar.gz directly
- CronJob: remove secrets-backup-config Secret (encryption passphrase)
- CronJob: remove ENCRYPTION_PASSPHRASE env var
- Bump image tag to 1.0.1, update workflow and manifest reference

Flow: kubectl export → tar.gz → upload to OBS (SSE-KMS handles rest)

Ref: IPCEICIS-9317
2026-06-12 13:02:11 +02:00

3 lines
162 B
Docker

FROM alpine/k8s:1.32.0
# No extra packages needed — kubectl and aws CLI are bundled in alpine/k8s
# OBS SSE-KMS handles encryption at rest; no openssl required