Commit Graph
1 Commits
Author SHA1 Message Date
Test 8a3375b775 security: encrypt ConfigMap with SOPS, remove plaintext secrets
ci / test (push) Successful in 1m33s
Build & Push Workflows Image / build-push (push) Failing after 9s
- ConfigMap values encrypted with age/SOPS (YubiKey-gated)
- Removed secrets.env, secret.yaml, poimen-application.yaml (plaintext)
- Worker needs no secrets — uses local LLM via ClusterIP, JWT from activity input
- Decrypt: sops-unlock && sops --decrypt k8s/configmap.enc.yaml
2026-09-06 05:56:49 -07:00