From fbe21e82abf00ca610f0f5c3f39814d9348ff778 Mon Sep 17 00:00:00 2001
From: Maidn <maidn@free-maidn.com>
Date: Wed, 16 Sep 2026 12:07:14 +0200
Subject: [PATCH] feat: add Maidn delivery pipeline

---
 .maidn/kustomization.yaml |  4 ++
 .maidn/secret-access.yaml | 86 +++++++++++++++++++++++++++++++++++++++
 2 files changed, 90 insertions(+)
 create mode 100644 .maidn/kustomization.yaml
 create mode 100644 .maidn/secret-access.yaml

diff --git a/.maidn/kustomization.yaml b/.maidn/kustomization.yaml
new file mode 100644
index 0000000..613ed55
--- /dev/null
+++ b/.maidn/kustomization.yaml
@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - secret-access.yaml
diff --git a/.maidn/secret-access.yaml b/.maidn/secret-access.yaml
new file mode 100644
index 0000000..fbc67b1
--- /dev/null
+++ b/.maidn/secret-access.yaml
@@ -0,0 +1,86 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: maidn-maidn-e2e-secret-runtime-staging
+  namespace: staging
+---
+apiVersion: external-secrets.io/v1
+kind: SecretStore
+metadata:
+  name: openbao-maidn-e2e-secret-runtime-staging
+  namespace: staging
+spec:
+  provider:
+    vault:
+      server: http://openbao.openbao.svc:8200
+      path: secret
+      version: v2
+      auth:
+        kubernetes:
+          mountPath: kubernetes
+          role: maidn-maidn-e2e-secret-runtime-staging
+          serviceAccountRef:
+            name: maidn-maidn-e2e-secret-runtime-staging
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: maidn-e2e-secret-runtime-staging
+  namespace: staging
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: SecretStore
+    name: openbao-maidn-e2e-secret-runtime-staging
+  target:
+    name: maidn-e2e-secret-runtime-staging
+    creationPolicy: Owner
+  data:
+    - secretKey: e2e-secret
+      remoteRef:
+        key: apps/maidn-e2e-secret/e2e-secret
+        property: value
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: maidn-maidn-e2e-secret-runtime-production
+  namespace: production
+---
+apiVersion: external-secrets.io/v1
+kind: SecretStore
+metadata:
+  name: openbao-maidn-e2e-secret-runtime-production
+  namespace: production
+spec:
+  provider:
+    vault:
+      server: http://openbao.openbao.svc:8200
+      path: secret
+      version: v2
+      auth:
+        kubernetes:
+          mountPath: kubernetes
+          role: maidn-maidn-e2e-secret-runtime-production
+          serviceAccountRef:
+            name: maidn-maidn-e2e-secret-runtime-production
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: maidn-e2e-secret-runtime-production
+  namespace: production
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: SecretStore
+    name: openbao-maidn-e2e-secret-runtime-production
+  target:
+    name: maidn-e2e-secret-runtime-production
+    creationPolicy: Owner
+  data:
+    - secretKey: e2e-secret
+      remoteRef:
+        key: apps/maidn-e2e-secret/e2e-secret
+        property: value
+---