traPtitech · motoki317 · Aug 26, 2025 · Jul 26, 2025 · Jul 26, 2025 · Jul 26, 2025
diff --git a/.github/workflows/diff.yaml b/.github/workflows/diff.yaml
@@ -27,8 +27,7 @@ jobs:
       - name: Fetch base
         uses: actions/checkout@v5
         with:
-          path: base
-          fetch-depth: "2"
+          fetch-depth: '2'
 
       - name: Install dyff
         run: |

diff --git a/.scripts/secret-unset-key.sh b/.scripts/secret-unset-key.sh
@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+
+if [ "$#" -ne 2 ]; then
+  echo "既にsopsで暗号化されたSecretのキーを削除します。"
+  echo "Usage:   $0 filename key" >&2
+  echo "Example: $0 traq/secrets/env.yaml MY_ENV_NAME" >&2
+  exit 1
+fi
+
+set -eux
+
+sops --config .sops.yaml unset "$1" "[\"stringData\"][\"$2\"]"
diff --git a/ns-dev-system/app-namespace-patch.yaml b/ns-dev-system/app-namespace-patch.yaml
diff --git a/ns-dev-system/certificate.yaml b/ns-dev-system/certificate.yaml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: ns
+
+spec:
+  issuerRef:
+    kind: ClusterIssuer
+    name: cluster-issuer
+  secretName: ns-tls
+  duration: 2160h0m0s # 90d
+  renewBefore: 720h0m0s # 30d
+  dnsNames:
+    - ns-dev.trapti.tech
diff --git a/ns-dev-system/components/builder-deployment-patch.yaml b/ns-dev-system/components/builder-deployment-patch.yaml
diff --git a/ns-dev-system/components/certificate-patch.yaml b/ns-dev-system/components/certificate-patch.yaml
diff --git a/ns-dev-system/components/controller-cluster-role-binding.yaml b/ns-dev-system/components/controller-cluster-role-binding.yaml
diff --git a/ns-dev-system/components/controller-cluster-role-global-binding-patch.yaml b/ns-dev-system/components/controller-cluster-role-global-binding-patch.yaml
diff --git a/ns-dev-system/components/controller-cluster-role-global-patch.yaml b/ns-dev-system/components/controller-cluster-role-global-patch.yaml
diff --git a/ns-dev-system/components/controller-cluster-role-local-binding-patch.yaml b/ns-dev-system/components/controller-cluster-role-local-binding-patch.yaml
diff --git a/ns-dev-system/components/controller-cluster-role-local-patch.yaml b/ns-dev-system/components/controller-cluster-role-local-patch.yaml
diff --git a/ns-dev-system/components/controller-deployment-patch.yaml b/ns-dev-system/components/controller-deployment-patch.yaml
diff --git a/ns-dev-system/components/controller-ssh-service-patch.yaml b/ns-dev-system/components/controller-ssh-service-patch.yaml
diff --git a/ns-dev-system/components/dashboard-deployment-patch.yaml b/ns-dev-system/components/dashboard-deployment-patch.yaml
diff --git a/ns-dev-system/components/gateway-deployment-patch.yaml b/ns-dev-system/components/gateway-deployment-patch.yaml
diff --git a/ns-dev-system/components/gitea-integration-stateful-set-patch.yaml b/ns-dev-system/components/gitea-integration-stateful-set-patch.yaml
diff --git a/ns-dev-system/components/ingress-route-patch.yaml b/ns-dev-system/components/ingress-route-patch.yaml
diff --git a/ns-dev-system/components/migrate-job-patch.yaml b/ns-dev-system/components/migrate-job-patch.yaml
diff --git a/ns-dev-system/components/sablier-cluster-role-binding-patch.yaml b/ns-dev-system/components/sablier-cluster-role-binding-patch.yaml
diff --git a/ns-dev-system/components/sablier-cluster-role-binding.yaml b/ns-dev-system/components/sablier-cluster-role-binding.yaml
diff --git a/ns-dev-system/components/sablier-cluster-role-patch.yaml b/ns-dev-system/components/sablier-cluster-role-patch.yaml
diff --git a/ns-dev-system/components/sablier-deployment-patch.yaml b/ns-dev-system/components/sablier-deployment-patch.yaml