obsidian deployment

cluster/applications/obsidian-vault/obsidian-sync.yaml

@@ -0,0 +1,18 @@
+# DO NOT COMMIT real values. Create out-of-band in namespace "obsidian":
+#
+#   ob login     # once, on a trusted machine
+#   kubectl create namespace obsidian   # if Argo hasn't created it yet
+#   kubectl -n obsidian create secret generic obsidian-sync \
+#     --from-file=auth_token=<path to auth_token in your obsidian-headless config dir> \
+#     --from-literal=vault_name='<exact remote vault name>' \
+#     --from-literal=e2ee_password='<only if the vault uses E2EE>'
+apiVersion: v1
+kind: Secret
+metadata:
+  name: obsidian-sync
+  namespace: obsidian
+type: Opaque
+stringData:
+  auth_token: "REPLACE"
+  vault_name: "REPLACE"
+  # e2ee_password: "REPLACE"