rock/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor(argocd): simplify secrets approach — use directory source, manual Secrets for Stage 0

Browse Source 
Reverts complex CMP plugin setup (helm chart doesn't support repoServer.extraContainers).
Instead: sops-secrets Application uses directory source (no plugin), emits placeholder
README. Manually-created Secrets (grafana-admin) live in target namespaces.

Full CMP plugin work deferred to future stage. Grafana values still wired to
admin.existingSecret (no-op until Secret exists, which it now does).

This unblocks cluster deployment without waiting for ArgoCD CMP plumbing.
This commit is contained in:
Story Crater Bot
2026-07-20 11:49:23 -07:00
parent d282ae1aa0
commit abaea8823b
3 changed files with 7 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/security/sops-secrets/00-README.md
+6
View File
@@ -0,0 +1,6 @@
# SOPS-Decrypted Secrets
Placeholder for CMP-generated secrets (pending full CMP plugin setup).
Currently, manually-created Secrets live in individual namespaces (e.g., grafana-admin in logging/).
Once the CMP plugin is wired, this Application will decode *.enc.yaml and emit all Secrets here.