k8s/argocd/secrets/kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

# Disable hash suffix for all generated secrets (stable names)
generatorOptions:
  disableNameSuffixHash: true

# SOPS-encrypted secrets via ksops generator
generators:
  - secret-generator.yaml
refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments 2026-08-12 13:16:15 -07:00			`apiVersion: kustomize.config.k8s.io/v1beta1`
			`kind: Kustomization`
feat: add portfolio LLM_API_TOKEN to ksops secrets 2026-09-01 09:42:02 -07:00
iam: add memory scope, service accounts, manual provisioning 2026-09-03 18:07:22 -07:00			`# Disable hash suffix for all generated secrets (stable names)`
			`generatorOptions:`
			`disableNameSuffixHash: true`

			`# SOPS-encrypted secrets via ksops generator`
			`generators:`
			`- secret-generator.yaml`