Add new infra architecture

infrastructure/cicd/tekton/secrets/kustomization.yaml

@@ -0,0 +1,19 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - secrets.yaml
+
+# Note: In production, use sealed-secrets or external-secrets-operator
+# to manage secrets securely. The secrets.yaml file contains placeholder
+# values that must be replaced before deployment.
+#
+# Example using sealed-secrets:
+# 1. Install sealed-secrets controller
+# 2. Create SealedSecret resources instead of plain Secrets
+# 3. Commit the SealedSecret manifests to Git (safe to commit)
+#
+# Example using external-secrets-operator:
+# 1. Install external-secrets-operator
+# 2. Configure a SecretStore (AWS Secrets Manager, HashiCorp Vault, etc.)
+# 3. Create ExternalSecret resources that reference the SecretStore