From 56fbb08cad518e0db113af152be3463b31bcb819 Mon Sep 17 00:00:00 2001
From: Melvin GABALI <melvin.gabali@gmail.com>
Date: Thu, 22 Jan 2026 01:22:21 +0100
Subject: [PATCH] delete secret

---
 .../ops/templates/secret-ovh-credentials.yaml | 28 -------------------
 secret-ovh-credentials.yaml                   | 12 ++++++++
 2 files changed, 12 insertions(+), 28 deletions(-)
 delete mode 100644 helm/cert-manager-webhook-ovh/ops/templates/secret-ovh-credentials.yaml
 create mode 100644 secret-ovh-credentials.yaml

diff --git a/helm/cert-manager-webhook-ovh/ops/templates/secret-ovh-credentials.yaml b/helm/cert-manager-webhook-ovh/ops/templates/secret-ovh-credentials.yaml
deleted file mode 100644
index 56dd74b..0000000
--- a/helm/cert-manager-webhook-ovh/ops/templates/secret-ovh-credentials.yaml
+++ /dev/null
@@ -1,28 +0,0 @@
-# Secret pour les credentials OVH (DNS-01 challenge)
-# IMPORTANT: Ce secret doit être dans le namespace cert-manager-ops
-# car le webhook doit pouvoir y accéder pour lire les credentials
-#
-# Pour créer le Secret manuellement avec vos vraies valeurs :
-# kubectl create secret generic ovh-credentials \
-#   --from-literal=application-secret=VOTRE_APPLICATION_SECRET \
-#   --from-literal=consumer-key=VOTRE_CONSUMER_KEY \
-#   -n cert-manager-ops \
-#   --context=cluster-ops
-#
-# OU utilisez ce template en remplaçant les valeurs base64 ci-dessous :
-# echo -n 'VOTRE_APPLICATION_SECRET' | base64
-# echo -n 'VOTRE_CONSUMER_KEY' | base64
-
-apiVersion: v1
-kind: Secret
-metadata:
-  name: ovh-credentials
-  namespace: cert-manager-ops
-type: Opaque
-data:
-  # Encodez vos credentials en base64 :
-  # echo -n 'VOTRE_APPLICATION_SECRET' | base64
-  # echo -n 'VOTRE_CONSUMER_KEY' | base64
-  application-secret: N2RiNWM3ZTdmNWE5MTM2Y2I5YmE4YmRmNjRjYTNmYTI=
-  consumer-key: M2VjOWM5ZTdmNjgzZWI0NDkyY2IwYjhhZTg1NWU0YWM=
-
diff --git a/secret-ovh-credentials.yaml b/secret-ovh-credentials.yaml
new file mode 100644
index 0000000..b58fd49
--- /dev/null
+++ b/secret-ovh-credentials.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: ovh-credentials
+  namespace: cert-manager-ops
+type: Opaque
+stringData:
+  # Utilisez stringData pour mettre les valeurs en CLAIR, 
+  # K8s les encodera proprement en base64 pour vous.
+  application-key: "XXXXXXXXXXXXXXXXX"
+  application-secret: "XXXXXXXXXXXXXXXXX"
+  consumer-key: "XXXXXXXXXXXXXXXXX"
\ No newline at end of file