move to sealed secrets

manifest/overlays/production/kustomization.yaml

@@ -6,8 +6,13 @@ namespace: argocd
 resources:
   - ../../base
   - argocd-cmp-cm.yaml
-  - ksops-cmp-config.yaml
   - ingressroute.yaml
+  - argocd-gitea-token.sealed.secret.yaml
+  - argocd-notifications-secret.sealed.secret.yaml
+  - argocd-redis.sealed.secret.yaml
+  - argocd-secret.sealed.secret.yaml
+  - repo-creds-external.sealed.secret.yaml
+  - repo-creds-internal.sealed.secret.yaml
 
 patches:
   - path: argocd-cm-patch.yaml
@@ -17,7 +22,7 @@ patches:
   - path: repo-server-patch.yaml
   - path: disable-bundled-redis-patch.yaml
 
-# KSOPS decrypts secret.enc.yaml at render time.
-# The presence of ksops-generator.yaml activates the KSOPS CMP plugin.
-generators:
-  - ksops-generator.yaml
+# # KSOPS decrypts secret.enc.yaml at render time.
+# # The presence of ksops-generator.yaml activates the KSOPS CMP plugin.
+# generators:
+#   - ksops-generator.yaml