Story Crater Bot
8ed3923c18
- Remove configmap.enc.yaml from resources (blocked kustomize parsing) - Create secret-generator.yaml with ksops exec plugin config - ksops decrypts secrets before kustomize reads them - Allows Image Updater to safely edit images section - Fixes: ArgoCD repo-server now properly decrypts secrets via ksops plugin Pattern mirrors homelab/k8s/argocd/secrets/ for consistency
23 lines
523 B
YAML
23 lines
523 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
namespace: portfolio
|
|
|
|
resources:
|
|
- namespace.yaml
|
|
- deployment.yaml
|
|
- service.yaml
|
|
- ingress.yaml
|
|
|
|
# SOPS-encrypted secrets via ksops generator (ArgoCD repo-server plugin)
|
|
# ksops intercepts encrypted files, decrypts them, returns valid resources
|
|
generatorOptions:
|
|
disableNameSuffixHash: true
|
|
|
|
generators:
|
|
- secret-generator.yaml
|
|
|
|
# ArgoCD Image Updater configuration - for tag updates
|
|
images:
|
|
- name: forgejo.riotpiao.com/rock/portfolio
|
|
newTag: latest
|