- Fix sops-secrets kustomization: use generatorOptions instead of per-generator disableNameSuffixHash (invalid field) - Add RoleBindings for portfolio, poimen, dashboard namespaces so authentik-provisioner can create secrets there
11 lines
260 B
YAML
11 lines
260 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
# Disable hash suffix for all generated secrets (stable names)
|
|
generatorOptions:
|
|
disableNameSuffixHash: true
|
|
|
|
# SOPS-encrypted secrets via ksops generator
|
|
generators:
|
|
- secret-generator.yaml
|