homelab/k8s/argocd/secrets/kustomization.yaml at 6743f7c25f9df83113fbb09c6b9b90ecb93bb57c - homelab - Gitea: Git with a cup of tea

rock/homelab

Files

T

rock 20513c8b3b iam: add memory scope, service accounts, manual provisioning

- Add 'memory' scope property mapping (memory_projects, memory_visibility, memory_role)
- Add capability groups: llm-users, memory-users, memory-writers
- Add service account provisioning for portfolio-agent, memory-agent
- Fix sops-secrets kustomization (generatorOptions)
- Add RoleBindings for portfolio, poimen, dashboard namespaces
- Remove PostSync hook - IAM provisioning is now manual-only

2026-09-03 18:07:22 -07:00

11 lines

260 B

YAML

Raw Blame History

 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 # Disable hash suffix for all generated secrets (stable names)
 generatorOptions:
   disableNameSuffixHash: true
 # SOPS-encrypted secrets via ksops generator
 generators:
   - secret-generator.yaml