b4f371d415
- Add .sops.yaml (age) and encrypt every plaintext Secret manifest in apps/ - Commit the Flux GitRepository/Kustomization (previously only applied manually) with a decryption stanza referencing the sops-age key (created out-of-band, not committed) - Rotate JWT_SECRET (previously exposed in plaintext) and set a real AI_SERVICE_KEY (was an empty placeholder), shared between nxtgauge-backend-rust and nxtgauge-ai-assistant - Wire JWT_SECRET into the ai-assistant deployment (was missing entirely, causing every authenticated request to fail) - Redact the leaked LiteLLM production master key from README/OPENCODE_CONNECT docs; move the litellm prod overlay off a plaintext secretGenerator onto an encrypted patch
11 lines
414 B
YAML
11 lines
414 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- flux-system/gotk-sync.yaml
|
|
- ../../apps/nxtgauge-backend-rust/overlays/prod
|
|
- ../../apps/nxtgauge-frontend-solid/overlays/prod
|
|
- ../../apps/nxtgauge-admin-solid/overlays/prod
|
|
- ../../apps/nxtgauge-ai-assistant/overlays/prod
|
|
- ../../apps/github-actions-runners/base
|
|
- ../../apps/ollama/base
|
|
- ../../ops/openobserve-alerts
|