readd sops secret

.gitea/workflows/validate.yaml

@@ -71,10 +71,10 @@ jobs:
                 -strict \
                 -kubernetes-version 1.35.0 \
                 -schema-location default \
-                -ignore-missing-schemas
+                -ignore-missing-schemas \
                 -schema-location '.ci-schemas/{{.Group}}/{{.ResourceKind}}{{.KindSuffix}}.json' \
                 -schema-location '.ci-schemas/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json' \
-                -schema-location 'https://git.olb42.com/olb042/kubeconform/raw/branch/main/crdSchemas/{{ .ResourceKind }}_{{ .ResourceAPIVersion }}.json'
+                -schema-location 'https://git.olb42.com/olb042/kubeconform/raw/branch/main/crdSchemas/{{ .ResourceKind }}_{{ .ResourceAPIVersion }}.json' \
                 -summary
 
       - name: Apply bootstrap Application

ksops-cmp-config.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: ksops-cmp-config
+  namespace: argocd
+data:
+  plugin.yaml: |
+    apiVersion: argoproj.io/v1alpha1
+    kind: ConfigManagementPlugin
+    metadata:
+      name: ksops
+    spec:
+      version: v1.0
+      discover:
+        find:
+          glob: "**/ksops-generator.yaml"
+      generate:
+        command:
+          - kustomize
+          - build
+          - --enable-alpha-plugins
+          - --enable-exec
+          - .

manifest/overlays/production/kustomization.yaml

@@ -13,7 +13,8 @@ resources:
   - argocd-secret.sealed.secret.yaml
   - repo-creds-external.sealed.secret.yaml
   - repo-creds-internal.sealed.secret.yaml
-  - argocd-age-key.sealed.secret.yaml 
+  - argocd-age-key.sealed.secret.yaml
+  - ksops-cmp-config.yaml
 
 patches:
   - path: argocd-cm-patch.yaml