feat: get token from 1password

Architecture.md

@@ -52,7 +52,7 @@ Yay! you now have an interface, and an IP address to broadcast on :D
 ## Deploying secrets
 
 ```sh
-kubectl create secret generic 1password-credentials --from-file=1password-credentials.json --namespace 1password-system
+kubectl create secret generic 1password-credentials -n 1password-system --from-literal=1password-credentials.json="$(cat 1password-credentials.json|base64 )"
 
-kubectl create secret generic 1password-token --namespace 1password-system --from-literal token=<token>
+kubectl create secret generic 1password-token --namespace 1password-system --from-literal password=<token>
 ```

infra/configs/config-1password.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: onepassword.com/v1
+kind: OnePasswordItem
+metadata:
+  name: 1password-token
+  namespace: 1password-system
+spec:
+  itemPath: "vaults/cluster/items/Connect Token"

infra/configs/kustomization.yaml

@@ -2,3 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - config-metallb.yaml
+  - config-1password.yaml

infra/controllers/1password.yaml

@@ -37,5 +37,5 @@ spec:
       create: true
       token:
         name: 1password-token
-        key: token
+        key: password