k8s/argocd/secrets/kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

secretGenerator:
  - name: portfolio-secrets
    namespace: portfolio
    disableNameSuffixHash: true
    envs:
      - portfolio-secrets.enc.env
refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments 2026-08-12 13:16:15 -07:00			`apiVersion: kustomize.config.k8s.io/v1beta1`
			`kind: Kustomization`
feat: add portfolio LLM_API_TOKEN to ksops secrets 2026-09-01 09:42:02 -07:00
			`secretGenerator:`
			`- name: portfolio-secrets`
			`namespace: portfolio`
fix: disable name suffix hash for portfolio-secrets to match deployment reference 2026-09-01 10:38:05 -07:00			`disableNameSuffixHash: true`
feat: add portfolio LLM_API_TOKEN to ksops secrets 2026-09-01 09:42:02 -07:00			`envs:`
			`- portfolio-secrets.enc.env`