From cdc063c444489e377bbcd80bc59156247e647ece Mon Sep 17 00:00:00 2001
From: nick-gorse <nick@olb42.com>
Date: Fri, 24 Apr 2026 17:16:51 +0100
Subject: [PATCH] fix workflow to add a kustomise build for production

---
 .gitea/workflows/validate.yaml                  | 6 ++++++
 manifest/overlays/production/kustomization.yaml | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/validate.yaml b/.gitea/workflows/validate.yaml
index bf1f821..270309d 100644
--- a/.gitea/workflows/validate.yaml
+++ b/.gitea/workflows/validate.yaml
@@ -122,4 +122,10 @@ jobs:
           mkdir -p "${HOME}/.kube"
           printf '%s' "$KUBECONFIG_B64" | base64 -d > "${HOME}/.kube/config"
 
+          if [ "${GITHUB_EVENT_NAME:-}" == "push" ] || [ "${GITHUB_REF:-}" == "refs/heads/main" ]; then
+            for _ov in manifest/overlays/*; do
+              kubectl kustomize $_ov >/dev/null || exit 1
+            done
+          fi
+
           kubectl apply -f bootstrap/applicationset.yaml
diff --git a/manifest/overlays/production/kustomization.yaml b/manifest/overlays/production/kustomization.yaml
index fdaf81e..9f8ef87 100644
--- a/manifest/overlays/production/kustomization.yaml
+++ b/manifest/overlays/production/kustomization.yaml
@@ -7,4 +7,4 @@ resources:
   # - ../../base
   # - ingressroute.yaml
   - storage/persistentvolumeclaim.yaml
-  - secret.sealed.secret.yaml
+  - secret.sealed-secret.yaml