20 lines
710 B
YAML
20 lines
710 B
YAML
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||
|
|
kind: Kustomization
|
||
|
|
|
||
|
|
resources:
|
||
|
|
- secrets.yaml
|
||
|
|
|
||
|
|
# Note: In production, use sealed-secrets or external-secrets-operator
|
||
|
|
# to manage secrets securely. The secrets.yaml file contains placeholder
|
||
|
|
# values that must be replaced before deployment.
|
||
|
|
#
|
||
|
|
# Example using sealed-secrets:
|
||
|
|
# 1. Install sealed-secrets controller
|
||
|
|
# 2. Create SealedSecret resources instead of plain Secrets
|
||
|
|
# 3. Commit the SealedSecret manifests to Git (safe to commit)
|
||
|
|
#
|
||
|
|
# Example using external-secrets-operator:
|
||
|
|
# 1. Install external-secrets-operator
|
||
|
|
# 2. Configure a SecretStore (AWS Secrets Manager, HashiCorp Vault, etc.)
|
||
|
|
# 3. Create ExternalSecret resources that reference the SecretStore
|