moving to dormant project

.gitea/workflows/validate.yaml

@@ -15,9 +15,6 @@ jobs:
           curl -sL https://github.com/yannh/kubeconform/releases/latest/download/kubeconform-linux-amd64.tar.gz \
             | tar xz -C /usr/local/bin
           curl -fsSL https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash
-          curl -fsSL https://github.com/getsops/sops/releases/latest/download/sops-v3.x.linux.amd64 \
-            -o /usr/local/bin/sops
-          chmod +x /usr/local/bin/sops
           curl -fsSL https://github.com/mikefarah/yq/releases/latest/download/yq_linux_amd64 \
             -o /usr/local/bin/yq
           chmod +x /usr/local/bin/yq
@@ -68,11 +65,9 @@ jobs:
           mapfile -t manifests < <(
             find . -type f -name '*.yaml' \
               ! -path './.gitea/*' \
-              ! -name '.sops.yaml' \
               ! -name '*.enc.yaml' \
               ! -name '*.secret.yaml' \
               ! -name '*kustomization.yaml' \
-              ! -name 'secret-generator.yaml' \
               ! -path './bootstrap/config.yaml' \
               | sort
           )
@@ -95,31 +90,12 @@ jobs:
             | xargs kubeconform \
                 -strict \
                 -kubernetes-version 1.35.0 \
+                -ignore-missing-schemas \
                 -schema-location default \
                 -schema-location '.ci-schemas/{{.Group}}/{{.ResourceKind}}{{.KindSuffix}}.json' \
                 -schema-location '.ci-schemas/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json' \
                 -summary
 
-      - name: SOPS - check no secret files committed unencrypted
-        run: |
-          fail=0
-
-          while IFS= read -r file; do
-            if ! grep -q 'sops:' "$file"; then
-              echo "ERROR: $file appears to be unencrypted"
-              fail=1
-            fi
-          done < <(
-            find . -type f \( -name '*.secret.yaml' -o -name '*.enc.yaml' \) | sort
-          )
-
-          exit "$fail"
-
-      - name: Check SOPS sync
-        env:
-          SOPS_SYNC_HMAC_KEY: ${{ secrets.SOPS_SYNC_HMAC_KEY }}
-        run: scripts/ci/check-sops-sync
-
       - name: Apply bootstrap ApplicationSet
         env:
           KUBECONFIG_B64: ${{ secrets.KUBECONFIG_B64 }}