refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments

2026-08-12 13:16:15 -07:00
parent 9e84fb3386
commit beb3cb21a0
31 changed files with 383 additions and 393 deletions
@@ -1,3 +1,3 @@
 creation_rules:
  - path_regex: k8s/.*secrets.*\.ya?ml
-    age: age1smu533f803gmd0jq60s2zaj9zlznajy0ca6rtewd4r37mr2hs3uqsrldfh
+    age: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla