apiVersion: viaduct.ai/v1
kind: ksops
metadata:
  name: sops-secret-generator
  annotations:
    config.kubernetes.io/function: |
      exec:
        path: ksops
files:
  - agent-pod-models.enc.yaml
  - agent-pod-ssh-key.enc.yaml
  - authentik-secrets.enc.yaml
  - cloudflare-secrets.enc.yaml
  - forgejo-registry-pat.enc.yaml
  - forgejo-registry-pull.enc.yaml
  - forgejo-runner-token.enc.yaml
  - forgejo-secrets.enc.yaml
  - grafana-oidc-secrets.enc.yaml
  - grafana-secrets.enc.yaml
  - homarr-auth-oidc.enc.yaml
  - homarr-db-encryption.enc.yaml
  - homarr-secrets.enc.yaml
  - homelab-ca-secrets.enc.yaml
  - loki-secrets.enc.yaml
  - minio-secrets.enc.yaml
  - paperless-secrets.enc.yaml
  - vault-secrets.enc.yaml
  - vault-unseal-keys.enc.yaml
  - portfolio-secrets.enc.yaml