rock 1ce9458347 security: add SOPS-encrypted database credentials ...

Encrypt DATABASE_URL with age-based SOPS encryption.

File: k8s/test/db-credentials.enc.yaml
  - Contains DATABASE_URL with database credentials
  - Encrypted with age (SOPS)
  - ArgoCD+KSOPS plugin decrypts at deploy time
  - Safe to commit to git - no plaintext secrets

Usage in K8s Job:
  kubectl apply -f k8s/test/db-credentials.enc.yaml
  ArgoCD will decrypt via KSOPS plugin before applying

To view decrypted content:
  sops -d k8s/test/db-credentials.enc.yaml

To edit:
  sops k8s/test/db-credentials.enc.yaml

2026-09-14 22:48:14 +09:00

..

db-credentials.enc.yaml

security: add SOPS-encrypted database credentials

2026-09-14 22:48:14 +09:00

integration-test-job.yaml

test: K8s Job-based integration testing with migrations

2026-09-14 22:44:53 +09:00