0 Fork 0

Files

T

jakman85andClaude Opus 4.8 84a2d762f0 Phase 1 (author-only): Flux + SOPS bootstrap + interface wiring (T-1.4)

bootstrap/sops (age-keygen refusing in-repo, .sops.yaml, install-age-key.sh
glue installing the sops-age Secret) + bootstrap/flux (bootstrap.sh: flux
install -> apply -k clusters/dev; decryption/url patches). PM wiring: place
.sops.yaml at repo root (SOPS walks to root); inline the 3 flux patches into
clusters/dev (avoids kustomize ../ load-restriction). clusters/dev builds with
decryption enabled; full CI gate PASS. No key material; nothing executed.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-08-16 01:21:01 -05:00

flux

Phase 1 (author-only): Flux + SOPS bootstrap + interface wiring (T-1.4)

2026-08-16 01:21:01 -05:00

sops

Phase 1 (author-only): Flux + SOPS bootstrap + interface wiring (T-1.4)

2026-08-16 01:21:01 -05:00

README.md

Scope Phase 1: dev/test cluster bring-up on local KVM

2026-08-16 00:48:48 -05:00

README.md

bootstrap/ — Flux + SOPS age-key bootstrap (Phase 1 T-1.4)

sops/: age key generation + Flux SOPS decryption wiring (private key NEVER committed). flux/: flux bootstrap config pointing at clusters/dev. Spec: ADR-0004, ADR-0007.