fix: move gateway config from plaintext ConfigMap to SOPS-encrypted Secret

2026-09-05 00:28:45 -07:00
parent 33910fe8e9
commit 11ca4a5902
5 changed files with 266 additions and 3 deletions
@@ -8,7 +8,7 @@ resources:
 - service.yaml
 - deployment.yaml
 - network-policy.yaml
- configmap.yaml
+- gateway-config-secret.enc.yaml

 # The deployed image tag lives here and nowhere else. CI publishes
 # forgejo.riotpiao.com/rock/api-gateway:<commit-sha> and tags it as :latest on main.