k8s/argocd/secrets/kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
# All homelab SOPS-encrypted Secrets, decrypted in-line via the ksops generator.
# Each *.enc.yaml carries its own metadata.namespace, so no namespace transformer
# here (that would rewrite every Secret into one namespace). Renders exactly the
# Secret objects — replaces the old argocd-cmp-cm SOPS plugin.
generators:
  - secret-generator.yaml
refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments 2026-08-12 13:16:15 -07:00			`apiVersion: kustomize.config.k8s.io/v1beta1`
			`kind: Kustomization`
			`# All homelab SOPS-encrypted Secrets, decrypted in-line via the ksops generator.`
			`# Each *.enc.yaml carries its own metadata.namespace, so no namespace transformer`
			`# here (that would rewrite every Secret into one namespace). Renders exactly the`
			`# Secret objects — replaces the old argocd-cmp-cm SOPS plugin.`
			`generators:`
			`- secret-generator.yaml`