Files
poimen-memory/k8s
rock 1ce9458347
CI / CI (pull_request) Successful in 14m23s
security: add SOPS-encrypted database credentials
Encrypt DATABASE_URL with age-based SOPS encryption.

File: k8s/test/db-credentials.enc.yaml
  - Contains DATABASE_URL with database credentials
  - Encrypted with age (SOPS)
  - ArgoCD+KSOPS plugin decrypts at deploy time
  - Safe to commit to git - no plaintext secrets

Usage in K8s Job:
  kubectl apply -f k8s/test/db-credentials.enc.yaml
  ArgoCD will decrypt via KSOPS plugin before applying

To view decrypted content:
  sops -d k8s/test/db-credentials.enc.yaml

To edit:
  sops k8s/test/db-credentials.enc.yaml
2026-09-14 22:48:14 +09:00
..