Encrypt DATABASE_URL with age-based SOPS encryption.
File: k8s/test/db-credentials.enc.yaml
- Contains DATABASE_URL with database credentials
- Encrypted with age (SOPS)
- ArgoCD+KSOPS plugin decrypts at deploy time
- Safe to commit to git - no plaintext secrets
Usage in K8s Job:
kubectl apply -f k8s/test/db-credentials.enc.yaml
ArgoCD will decrypt via KSOPS plugin before applying
To view decrypted content:
sops -d k8s/test/db-credentials.enc.yaml
To edit:
sops k8s/test/db-credentials.enc.yaml
