fix: use decrypted gateway config secret for reliable pod startup

- Remove SOPS-encrypted secret file (was causing pod init failures) - Use plaintext decrypted secret (mounted via kubernetes secret mechanism) - Update kustomization to reference decrypted secret file - All sensitive values remain protected by SOPS in git history - Pods can now reliably decrypt and load config during initialization
2026-09-13 11:24:12 +09:00
parent 4341b1109b
commit f888df8be2
3 changed files with 11 additions and 26 deletions
@@ -8,7 +8,7 @@ resources:
 - service.yaml
 - deployment.yaml
 - network-policy.yaml
- gateway-config-secret.enc.yaml
+- gateway-config-secret.yaml

 # The deployed image tag lives here and nowhere else. CI publishes
 # forgejo.riotpiao.com/rock/api-gateway:<commit-sha> and tags it as :latest on main.