FEAT(velero): add velero and falco UI auth

- secrets from Vault

falco/helm-values/falco.yaml

@@ -140,6 +140,19 @@ falcosidekick:
         # cpu: removed to prevent throttling
         memory: 512Mi
 
+    # Environment variables from Vault secret
+    env:
+      - name: FALCOSIDEKICK_USERNAME
+        valueFrom:
+          secretKeyRef:
+            name: falco-ui-secret
+            key: username
+      - name: FALCOSIDEKICK_PASSWORD
+        valueFrom:
+          secretKeyRef:
+            name: falco-ui-secret
+            key: password
+
 # RBAC
 rbac:
   create: true

falco/kustomization.yaml

@@ -5,5 +5,7 @@ resources:
   # ArgoCD Application 리소스는 root kustomization.yaml에서 관리
   # - argocd/falco.yaml
 
+  # Falco UI credentials from Vault
+  - vault/falco-ui-secret.yaml
   # Falco UI Ingress
   - ingress/falco-ui-ingress.yaml

falco/vault/falco-ui-secret.yaml

@@ -0,0 +1,23 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: falco-ui-secret
+  namespace: falco
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault-backend
+  target:
+    name: falco-ui-secret
+    creationPolicy: Owner
+  data:
+    - secretKey: username
+      remoteRef:
+        key: cluster-infrastructure/falco
+        property: UI_USERNAME
+    - secretKey: password
+      remoteRef:
+        key: cluster-infrastructure/falco
+        property: UI_PASSWORD
+