fix(sops): drop the orphan forgejo-registry-pat file #65

2026-10-24T10:47:03Z

rock commented

2026-10-24 10:47:03 +00:00

ksops fails the whole sops-secrets application on this file: it targets namespace forgejo, which does not exist. That failure blocks every other file in the generator, including zitadel-masterkey.

The same Secret name is generated in namespace api by forgejo-registry-pat-api.enc.yaml, and the gateway reads that copy. Forgejo runs in namespace cicd.

ksops fails the whole sops-secrets application on this file: it targets namespace `forgejo`, which does not exist. That failure blocks every other file in the generator, including `zitadel-masterkey`. The same Secret name is generated in namespace `api` by `forgejo-registry-pat-api.enc.yaml`, and the gateway reads that copy. Forgejo runs in namespace `cicd`.

rock added 1 commit 2026-10-24 10:47:03 +00:00

fix(sops): drop the orphan forgejo-registry-pat file 6ee22401fd

ksops failed the whole sops-secrets application on this file: it declares
Secret forgejo-registry-pat in namespace forgejo, and no such namespace exists.
The failure blocks every other file in the generator list, including
zitadel-masterkey.

The same Secret name is already generated in namespace api by
forgejo-registry-pat-api.enc.yaml, and that is the copy the gateway reads. The
forgejo namespace copy is stale: Forgejo runs in namespace cicd, and namespace
forgejo was never created.

Remove the file and its generator entry. ArgoCD never created the Secret, so
pruning has nothing to remove.

rock merged commit 6c98ca7436 into main

2026-10-24 10:47:24 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: riotpiao-poimen/homelab#65