fix workflow to add a kustomise build for production

.gitea/workflows/validate.yaml

@@ -122,4 +122,10 @@ jobs:
           mkdir -p "${HOME}/.kube"
           printf '%s' "$KUBECONFIG_B64" | base64 -d > "${HOME}/.kube/config"
 
+          if [ "${GITHUB_EVENT_NAME:-}" == "push" ] || [ "${GITHUB_REF:-}" == "refs/heads/main" ]; then
+            for _ov in manifest/overlays/*; do
+              kubectl kustomize $_ov >/dev/null || exit 1
+            done
+          fi
+
           kubectl apply -f bootstrap/applicationset.yaml

manifest/overlays/production/kustomization.yaml

@@ -7,4 +7,4 @@ resources:
   # - ../../base
   # - ingressroute.yaml
   - storage/persistentvolumeclaim.yaml
-  - secret.sealed.secret.yaml
+  - secret.sealed-secret.yaml