ci: clean up external-secrets keys

.github/actions/cluster-setup-secrets/action.yaml

@@ -31,14 +31,16 @@ runs:
           kubectl apply -n "$TEST_NAMESPACE" \
             -f .github/config/external-secret/external-secret-certificates.yaml
 
-          APP_VERSION=$(helm show chart "$CHART_PATH" | yq .appVersion | grep -o '^[0-9]*\.[0-9]*')
-          VERSION_FILE=".github/config/external-secret/external-secret-${APP_VERSION}-integration-test-credentials.yaml"
-
-          if [[ -f "$VERSION_FILE" ]]; then
-            echo "✅ Applying version-specific external secret for app version: ${APP_VERSION}"
-            kubectl apply -n "$TEST_NAMESPACE" -f "$VERSION_FILE"
+          # Apply external secret configuration for integration tests
+          # Check for chart-specific external secret first (better approach)
+          CHART_SPECIFIC_FILE="${CHART_PATH}/test/integration/external-secrets/external-secret-integration-test-credentials.yaml"
+
+          if [[ -f "$CHART_SPECIFIC_FILE" ]]; then
+            echo "✅ Applying chart-specific external secret for integration tests: $CHART_SPECIFIC_FILE"
+            kubectl apply -n "$TEST_NAMESPACE" -f "$CHART_SPECIFIC_FILE"
           else
-            echo "⚠️ Version-specific external secret not found for app version: ${APP_VERSION}, using fallback"
+            echo "⚠️ Chart-specific external secret not found, using fallback"
+            # For backward compatibility with other versions (alpha, future versions).
             kubectl apply -n "$TEST_NAMESPACE" \
               -f .github/config/external-secret/external-secret-integration-test-credentials.yaml
           fi

.github/config/external-secret/external-secret-8.5-integration-test-credentials.yaml → charts/camunda-platform-8.5/test/integration/external-secrets/external-secret-integration-test-credentials.yaml

@@ -40,16 +40,16 @@ spec:
       remoteRef:
         key: integration-test
         property: console-secret
-    - secretKey: keycloak-secret
-      remoteRef:
-        key: integration-test
-        property: keycloak-secret
     - secretKey: zeebe-secret
       remoteRef:
         key: integration-test
         property: zeebe-secret
 
     # Identity authentication secrets
+    - secretKey: identity-firstuser-password
+      remoteRef:
+        key: integration-test
+        property: identity-firstuser-password
     - secretKey: identity-user-password
       remoteRef:
         key: integration-test
@@ -72,6 +72,14 @@ spec:
         property: password
 
     # Infrastructure passwords
+    - secretKey: admin-password
+      remoteRef:
+        key: integration-test
+        property: admin-password
+    - secretKey: postgres-password
+      remoteRef:
+        key: integration-test
+        property: postgres-password
     - secretKey: password
       remoteRef:
         key: integration-test

.github/config/external-secret/external-secret-8.7-integration-test-credentials.yaml → charts/camunda-platform-8.7/test/integration/external-secrets/external-secret-integration-test-credentials.yaml

@@ -40,10 +40,6 @@ spec:
       remoteRef:
         key: integration-test
         property: console-secret
-    - secretKey: keycloak-secret
-      remoteRef:
-        key: integration-test
-        property: keycloak-secret
     - secretKey: zeebe-secret
       remoteRef:
         key: integration-test

.github/config/external-secret/external-secret-8.8-integration-test-credentials.yaml → charts/camunda-platform-8.8/test/integration/external-secrets/external-secret-integration-test-credentials.yaml

@@ -24,18 +24,6 @@ spec:
         property: entra-child-app-client-secret
 
     # Component authentication secrets
-    - secretKey: optimize-secret
-      remoteRef:
-        key: integration-test
-        property: optimize-secret
-    - secretKey: connectors-secret
-      remoteRef:
-        key: integration-test
-        property: connectors-secret
-    - secretKey: keycloak-secret
-      remoteRef:
-        key: integration-test
-        property: keycloak-secret
 
     # Identity authentication secrets
     - secretKey: identity-user-password
@@ -50,10 +38,6 @@ spec:
       remoteRef:
         key: integration-test
         property: password
-    - secretKey: identity-connectors-client-password
-      remoteRef:
-        key: integration-test
-        property: password
     - secretKey: identity-connectors-client-token
       remoteRef:
         key: integration-test
@@ -66,26 +50,10 @@ spec:
       remoteRef:
         key: integration-test
         property: password
-    - secretKey: identity-operate-client-password
-      remoteRef:
-        key: integration-test
-        property: password
-    - secretKey: identity-optimize-client-password
-      remoteRef:
-        key: integration-test
-        property: password
     - secretKey: identity-optimize-client-token
       remoteRef:
         key: integration-test
         property: password
-    - secretKey: identity-tasklist-client-password
-      remoteRef:
-        key: integration-test
-        property: password
-    - secretKey: identity-zeebe-client-password
-      remoteRef:
-        key: integration-test
-        property: password
     - secretKey: identity-keycloak-admin-password
       remoteRef:
         key: integration-test