Sealed from live cluster state — no plaintext ever on disk:
- redis/github (dockerconfigjson pull secret)
- nowchess/remotek6-certs (prod, staging, kargo)
Added to kustomization:
- kargo/discord-webhook-secret
- nowchess/kargo/github-image-secret
- redis/github-pull-secret
- remotek6-certs for all three namespaces
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Janis Eccarius