sops decryption on all kustomizations

2026-02-04 04:59:54 +00:00 · 2025-12-17 14:21:48 -05:00
parent e072415e68
commit 48f6f5e1b5
23 changed files with 90 additions and 0 deletions
--- a/bootstrap/apps/kustomization-actual.yaml
+++ b/bootstrap/apps/kustomization-actual.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-authentik.yaml
+++ b/bootstrap/apps/kustomization-authentik.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-baikal.yaml
+++ b/bootstrap/apps/kustomization-baikal.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-booklore.yaml
+++ b/bootstrap/apps/kustomization-booklore.yaml
@@ -13,5 +13,7 @@ spec:
    name: flux-system
  decryption:
    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-gitea.yaml
+++ b/bootstrap/apps/kustomization-gitea.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-homeassistant.yaml
+++ b/bootstrap/apps/kustomization-homeassistant.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-immich.yaml
+++ b/bootstrap/apps/kustomization-immich.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-karakeep.yaml
+++ b/bootstrap/apps/kustomization-karakeep.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-kube-prometheus-stack.yaml
+++ b/bootstrap/apps/kustomization-kube-prometheus-stack.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-media.yaml
+++ b/bootstrap/apps/kustomization-media.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-michaelthomson.yaml
+++ b/bootstrap/apps/kustomization-michaelthomson.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-minecraft.yaml
+++ b/bootstrap/apps/kustomization-minecraft.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-nextcloud.yaml
+++ b/bootstrap/apps/kustomization-nextcloud.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-ntfy.yaml
+++ b/bootstrap/apps/kustomization-ntfy.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-pihole.yaml
+++ b/bootstrap/apps/kustomization-pihole.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-stirling-pdf.yaml
+++ b/bootstrap/apps/kustomization-stirling-pdf.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-syncthing.yaml
+++ b/bootstrap/apps/kustomization-syncthing.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-uptime-kuma.yaml
+++ b/bootstrap/apps/kustomization-uptime-kuma.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-vaultwarden.yaml
+++ b/bootstrap/apps/kustomization-vaultwarden.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/apps/kustomization-wg-easy.yaml
+++ b/bootstrap/apps/kustomization-wg-easy.yaml
@@ -11,5 +11,9 @@ spec:
  sourceRef:
    kind: GitRepository
    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-configs
--- a/bootstrap/infrastructure/infra-configs.yaml
+++ b/bootstrap/infrastructure/infra-configs.yaml
@@ -4,6 +4,10 @@ metadata:
  name: infra-configs
  namespace: flux-system
 spec:
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-controllers
  interval: 1h
--- a/bootstrap/infrastructure/infra-controllers.yaml
+++ b/bootstrap/infrastructure/infra-controllers.yaml
@@ -4,6 +4,10 @@ metadata:
  name: infra-controllers
  namespace: flux-system
 spec:
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-crds
  interval: 10m
--- a/bootstrap/infrastructure/infra-crds.yaml
+++ b/bootstrap/infrastructure/infra-crds.yaml
@@ -4,6 +4,10 @@ metadata:
  name: infra-crds
  namespace: flux-system
 spec:
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
  dependsOn:
    - name: infra-namespaces
  interval: 1h