Using externalsecret instead of exposeing secret in the repo

manifests/dot-ai-stack/values.yaml

@@ -13,10 +13,8 @@ dot-ai:
     name: dot-ai-model-api-key
     auth:
       keyName: auth-token
-      token: ""
     openai:
       keyName: model-api-key
-      apiKey: ""
 
   ingress:
     enabled: true
@@ -36,8 +34,16 @@ dot-ai-ui:
   enabled: true
   fullnameOverride: dot-ai-ui
 
+  dotAi:
+    auth:
+      secretRef:
+        name: dot-ai-model-api-key
+        key: auth-token
+
   uiAuth:
-    token: "+zjZEF8v9l9zG3evXgTuF9RIdMtpfOXr6u6o4+bXl5Y="
+    secretRef:
+      name: dot-ai-model-api-key
+      key: ui-auth-token
 
   ingress:
     enabled: true

manifests/secrets-ai-stack/values.yaml

@@ -13,3 +13,6 @@ externalSecrets:
       - secretKey: auth-token
         remoteKey: ai-stack/dot-ai
         property: auth-token
+      - secretKey: ui-auth-token
+        remoteKey: ai-stack/dot-ai
+        property: ui-auth-token