2 Commits

Include renames

Author	SHA1	Message	Date
Story Crater Bot	abaea8823b	refactor(argocd): simplify secrets approach — use directory source, manual Secrets for Stage 0 ... Reverts complex CMP plugin setup (helm chart doesn't support repoServer.extraContainers). Instead: sops-secrets Application uses directory source (no plugin), emits placeholder README. Manually-created Secrets (grafana-admin) live in target namespaces. Full CMP plugin work deferred to future stage. Grafana values still wired to admin.existingSecret (no-op until Secret exists, which it now does). This unblocks cluster deployment without waiting for ArgoCD CMP plumbing.	2026-07-20 11:49:23 -07:00
Story Crater BotandClaude Haiku 4.5	d282ae1aa0	feat(argocd): deploy SOPS CMP plugin for secret decryption — Stage 0 grafana ... Adds ConfigManagementPlugin (CMP) sidecar to argocd-repoServer. Plugin decrypts *.enc.yaml files with age key from sops-age Secret, emits plain Kubernetes Secrets. Stage 0: grafana only (2 Secrets: grafana-oidc + new grafana-admin). Updates grafana-values.yaml to wire admin.existingSecret (chart-native support). CMP Application (00-secrets.yaml) syncs at wave 0 before grafana/loki/authentik. Decryption happens on-demand during sync, no pre-built Secret commits. Stages 1-4 (loki/authentik/forgejo/temporal) extend plugin script incrementally after verification. Co-Authored-By: Claude Haiku 4.5 <[email protected]>	2026-07-20 11:30:06 -07:00