apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: portfolio

resources:
- namespace.yaml
- deployment.yaml
- service.yaml
- ingress.yaml

# SOPS-encrypted secrets via ksops generator (ArgoCD repo-server plugin)
# ksops intercepts encrypted files, decrypts them, returns valid resources
generatorOptions:
  disableNameSuffixHash: true

generators:
  - secret-generator.yaml

# ArgoCD Image Updater configuration - for tag updates
images:
- name: forgejo.riotpiao.com/rock/portfolio
  newTag: f68c904