ermnvldmr.com/.sops.yaml at d0da0432af289f555968a87ffc0b7140560097fe - ermnvldmr.com - Gitea: Git with a cup of tea

deytenit/ermnvldmr.com

0 Fork 0

Files

T

deytenit 6037a558dd fix(sops): set encrypted_regex to data/stringData and configure DNS fallback resolvers (#33 )

### Summary of Changes

1. **SOPS Secret Encryption Scope**:
- Configured `encrypted_regex: '^(data|stringData)$'` in `.sops.yaml`.
- Re-encrypted PostgreSQL and Umami secrets so `apiVersion`, `kind`, and
`metadata.name` remain in clean plaintext.
- Prevents Kustomize controller panic on encrypted metadata during Flux
GitOps reconciliation.

2. **Reliable DNS Fallback**:
- Added standard fallback DNS resolvers (`1.1.1.1`, `8.8.8.8`,
`77.88.8.8`) to `03-cleanup.sh` and `bootstrap-cluster.sh`.

2026-08-23 16:27:25 +03:00

5 lines

174 B

YAML

Raw Blame History

 creation_rules:
   - path_regex: ci/k8s/.*secret.*\.yaml$
     encrypted_regex: '^(data|stringData)$'
     age: "age1jpa7hqyzzdfq7lvnw3l8qy6648mtjgpcqnljl5jz92dcqjrnsqfsn7m0fl"