Secrets manager #71

New Issue

2025-04-19T23:05:48Z

rasmus commented

2025-04-19 23:05:48 +00:00

Currently used https://git.k-space.ee/secretspace/kube with woodpecker (kustomize). I'd be very happy if argo could include only the .env files, so the kustomization.yaml in secret repo would be visible.

https://github.com/mmalyska/argocd-secret-replacer is a potential solution, although I'm not a fan of having creds in the repo, even when encrypted.

Creating secrets by hand is faulty: errors, docs problems, missing secrets, seen as orphaned.

Currently used https://git.k-space.ee/secretspace/kube with woodpecker (kustomize). I'd be very happy if argo could include only the `.env` files, so the kustomization.yaml in secret repo would be visible. https://github.com/mmalyska/argocd-secret-replacer is a potential solution, although I'm not a fan of having creds in the repo, even when encrypted. Creating secrets by hand is faulty: errors, docs problems, missing secrets, seen as orphaned.

rasmus added the enchancement label 2025-04-19 23:05:48 +00:00

rasmus added this to the Argospaces milestone 2025-04-20 16:46:43 +00:00

rasmus removed this from the Argospaces milestone 2025-04-21 00:35:39 +00:00

rasmus commented

2025-12-18 00:07:44 +00:00

https://github.com/kubernetes-sigs/kustomize/pull/5679 got merged! https://github.com/kubernetes-sigs/kustomize/blob/master/proposals/22-03-value-in-the-structured-data.md

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: k-space/kube#71