feat(k8s): update valkey-cluster references and add SSA annotations for secrets

flux/clusters/dev-cm/patches/infra-data.yaml

@@ -52,14 +52,15 @@ spec:
                 effect: "NoSchedule"
     - target:
         kind: HelmRelease
-        name: valkey-cluster-sh
+        name: valkey-cluster
       patch: |
         apiVersion: helm.toolkit.fluxcd.io/v2
         kind: HelmRelease
         metadata:
-          name: valkey-cluster-sh
+          name: valkey-cluster
         spec:
           values:
+            fullnameOverride: valkey-cluster-sh
             valkey:
               nodeAffinityPreset:
                 type: hard

flux/clusters/dev-cm/patches/infra-gitops.yaml

@@ -24,6 +24,17 @@ spec:
                     secretKeyRef:
                       name: cnpg17-cluster-sh-app
                       key: password
+                - name: REDIS_PASSWORD
+                  valueFrom:
+                    secretKeyRef:
+                      name: valkey-cluster-sh
+                      key: valkey-password
+                - name: GITEA__SESSION__PROVIDER_CONFIG
+                  value: "redis://:$(REDIS_PASSWORD)@valkey-cluster-sh-headless.infra-data:6379/0?pool_size=100&idle_timeout=180s"
+                - name: GITEA__CACHE__HOST
+                  value: "redis://:$(REDIS_PASSWORD)@valkey-cluster-sh-headless.infra-data:6379/0?pool_size=100&idle_timeout=180s"
+                - name: GITEA__QUEUE__CONN_STR
+                  value: "redis://:$(REDIS_PASSWORD)@valkey-cluster-sh-headless.infra-data:6379/0?pool_size=100&idle_timeout=180s"
             affinity:
               podAffinity:
                 preferredDuringSchedulingIgnoredDuringExecution: