aly.codes / infra
Hybrid cloud cluster monorepo with Ansible, K8s, NixOS, and Terraform. cute.haus
ansible terraform nix k8s
0
Fork 0

Configure Feed

Select the types of activity you want to include in your feed.

infra / k8s / flux / secrets /
at master 25 files
Aly Raffauf k8s: add slingshot statefulset
cb434d73
README.md
atcr-pull.sops.yaml
audiobookshelf-rclone.sops.yaml
cloudflare-api-token.sops.yaml
forgejo-env.sops.yaml
forgejo-pg-creds.sops.yaml
forward-auth-navidrome-env.sops.yaml
immich-config.sops.yaml
immich-env.sops.yaml
kustomization.yaml
longhorn-b2.sops.yaml
namespaces.yaml
navidrome-env.sops.yaml
nextcloud-env.sops.yaml
nextcloud-pg-creds.sops.yaml
paperless-env.sops.yaml
paperless-pg-creds.sops.yaml
paperless-rclone.sops.yaml
pg-shared-b2.sops.yaml
pocket-id-env.sops.yaml
pocket-id-pg-creds.sops.yaml
tailscale-operator-values.sops.yaml
tranquil-pds-env.sops.yaml
tranquil-pg-creds.sops.yaml
vaultwarden-env.sops.yaml
README.md

Flux Secrets#

First-class Kubernetes Secret manifests managed by Flux live here as SOPS-encrypted *.sops.yaml files. The Flux age recipient may decrypt this directory only; legacy secrets/*.yaml remain host/user-only.

The flux-system/sops-age private key Secret is a bootstrap artifact. Do not store that private key in this repository.

This directory is reconciled as its own Flux layer before chart layers, so first-class Secrets exist before HelmReleases that reference them.