feat(secrets): replace config maps with secrets for sensitive configurations in multiple modules

terraform/modules/apps/gitea/main.tf

@@ -33,7 +33,7 @@ resource "kubernetes_manifest" "internal_cert" {
   }
 }
 
-resource "kubernetes_config_map" "gitea_config" {
+resource "kubernetes_secret" "gitea_config" {
   metadata {
     name      = "gitea-config"
     namespace = kubernetes_namespace.gitea.metadata[0].name
@@ -41,6 +41,7 @@ resource "kubernetes_config_map" "gitea_config" {
   data = {
     "app.ini" = local.config
   }
+  type = "Opaque"
 }
 
 
@@ -157,8 +158,12 @@ resource "kubernetes_deployment" "gitea" {
         }
         volume {
           name = "gitea-config"
-          config_map {
-            name = kubernetes_config_map.gitea_config.metadata[0].name
+          secret {
+            secret_name = kubernetes_secret.gitea_config.metadata[0].name
+            items {
+              key  = "app.ini"
+              path = "app.ini"
+            }
           }
         }
         dynamic "volume" {