From e6f7a47f4f4ef2f464b482fa9e5f34f32779d9b5 Mon Sep 17 00:00:00 2001
From: Johannes Reichhardt <johannes.reichhardt@gmail.com>
Date: Tue, 31 Mar 2026 19:13:50 -0500
Subject: [PATCH] Security: Move Flask secret to External Secrets (ESO)

---
 k8s/deployment.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/k8s/deployment.yaml b/k8s/deployment.yaml
index 8036bcb..9ca0b1f 100644
--- a/k8s/deployment.yaml
+++ b/k8s/deployment.yaml
@@ -33,6 +33,9 @@ spec:
   - secretKey: ai-api-key
     remoteRef:
       key: gemini-api-key
+  - secretKey: flask-secret-key
+    remoteRef:
+      key: flask-secret-key
 ---
 apiVersion: gateway.networking.k8s.io/v1beta1
 kind: HTTPRoute