From 19089e0514fc023798718d031d605ceb28720e4e Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Sun, 16 Aug 2026 00:27:10 -0700
Subject: [PATCH] fix(agent-pod): register agent-pod-models.enc.yaml with ksops
 generator
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Secret was created but never listed in secret-generator.yaml's files
allowlist, so ksops never decrypted it — pod stuck on FailedMount
waiting for secret "pi-models".
---
 k8s/argocd/secrets/secret-generator.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/k8s/argocd/secrets/secret-generator.yaml b/k8s/argocd/secrets/secret-generator.yaml
index 63dbb17..1ac150f 100644
--- a/k8s/argocd/secrets/secret-generator.yaml
+++ b/k8s/argocd/secrets/secret-generator.yaml
@@ -7,6 +7,7 @@ metadata:
       exec:
         path: ksops
 files:
+  - agent-pod-models.enc.yaml
   - authentik-secrets.enc.yaml
   - cloudflare-secrets.enc.yaml
   - forgejo-runner-token.enc.yaml