Sops.

kubernetes/apps/database/cloudnative-pg/ks.yaml

@@ -33,11 +33,3 @@ spec:
   interval: 30m
   retryInterval: 1m
   timeout: 5m
-  decryption:
-    provider: sops
-    secretRef:
-      name: sops-age
-  postBuild:
-    substituteFrom:
-      - kind: Secret
-        name: cluster-secrets

kubernetes/flux/cluster-apps.yaml

@@ -11,22 +11,33 @@ spec:
   sourceRef:
     kind: GitRepository
     name: valinor
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
   postBuild:
     substituteFrom:
       - kind: ConfigMap
         name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets
   patches:
     - patch: |-
         apiVersion: kustomize.toolkit.fluxcd.io/v1
         kind: Kustomization
         metadata:
           name: not-used
-          namespace: not-used
         spec:
+          decryption:
+            provider: sops
+            secretRef:
+              name: sops-age
           postBuild:
             substituteFrom:
               - kind: ConfigMap
                 name: cluster-settings
+              - kind: Secret
+                name: cluster-secrets
       target:
         group: kustomize.toolkit.fluxcd.io
         kind: Kustomization