deploy-app-kargo-private/infra/traefik-routes/manifests/kargo-transport.yaml at 4dd68859d865ccf4c8cff5170d8d0b835e359f0a - deploy-app-kargo-private - Gitea Airgap Registry

gitea_admin/deploy-app-kargo-private

Files

XoR 4dd68859d8 feat: SOPS + age encrypted secrets structure

- .sops.yaml with 3 age keys (admin, dev, prod)
- infra/gitea/values/*.enc.yaml — per-env encrypted Helm values
- infra/kargo/values/*.enc.yaml — per-env encrypted Kargo admin secrets
- kargo/credentials/*.enc.yaml — per-env encrypted git credentials (ksops)
- infra/kargo-credentials/ — ArgoCD app for deploying Kargo creds via ksops
- All repoURLs point to deploy-app-kargo-private

Structure from deploy-app-kargo (reference), adapted for SOPS workflow

2026-03-11 10:01:26 +03:00

9 lines

224 B

YAML

Raw Blame History

 # ServersTransport to skip TLS verification for Kargo backend (self-signed cert)
 apiVersion: traefik.io/v1alpha1
 kind: ServersTransport
 metadata:
   name: kargo-skip-verify
   namespace: kargo
 spec:
   insecureSkipVerify: true