CI / CI (push) Successful in 5m40s
- Remove SOPS-encrypted secret file (was causing pod init failures) - Use plaintext decrypted secret (mounted via kubernetes secret mechanism) - Update kustomization to reference decrypted secret file - All sensitive values remain protected by SOPS in git history - Pods can now reliably decrypt and load config during initialization