Files
riotpiao.com/infra/portfolio/base/secret-generator.yaml
T
Story Crater Bot 8ed3923c18 fix: use ksops generator pattern for SOPS-encrypted secrets
- Remove configmap.enc.yaml from resources (blocked kustomize parsing)
- Create secret-generator.yaml with ksops exec plugin config
- ksops decrypts secrets before kustomize reads them
- Allows Image Updater to safely edit images section
- Fixes: ArgoCD repo-server now properly decrypts secrets via ksops plugin

Pattern mirrors homelab/k8s/argocd/secrets/ for consistency
2026-09-07 17:54:34 -07:00

11 lines
198 B
YAML

apiVersion: viaduct.ai/v1
kind: ksops
metadata:
name: portfolio-secrets-generator
annotations:
config.kubernetes.io/function: |
exec:
path: ksops
files:
- configmap.enc.yaml