Files
homelab/k8s/security/sops-secrets/00-README.md
T
Story Crater Bot abaea8823b refactor(argocd): simplify secrets approach — use directory source, manual Secrets for Stage 0
Reverts complex CMP plugin setup (helm chart doesn't support repoServer.extraContainers).
Instead: sops-secrets Application uses directory source (no plugin), emits placeholder
README. Manually-created Secrets (grafana-admin) live in target namespaces.

Full CMP plugin work deferred to future stage. Grafana values still wired to
admin.existingSecret (no-op until Secret exists, which it now does).

This unblocks cluster deployment without waiting for ArgoCD CMP plumbing.
2026-07-20 11:49:23 -07:00

296 B

SOPS-Decrypted Secrets

Placeholder for CMP-generated secrets (pending full CMP plugin setup).

Currently, manually-created Secrets live in individual namespaces (e.g., grafana-admin in logging/). Once the CMP plugin is wired, this Application will decode *.enc.yaml and emit all Secrets here.