Add support for decryption

valorl · valorl · commit 7da90f1f2e7c · 2025-05-26T10:04:42.000+02:00
diff --git a/modules/flux-git-sync/README.md b/modules/flux-git-sync/README.md
@@ -44,5 +44,6 @@ timoni -n flux-system delete my-repo-sync
 | `substituteFrom:`            | `[...{kind: string, name: string, optional: bool}]` | `[]`              | List of ConfigMaps and Secrets to use for variable substitution                                                                            |
 | `dependsOn:`                 | `[...{name: string}]`                               | `{}`              | List of dependencies                                                                                                                       |
 | `patches:`                   | `[...{patch: {...}}]`                               | `{}`              | Strategic merge and JSON patches, defined as inline YAML objects                                                                           |
+| `decryption:`                | `{provider: string, secretRef: { name: string}}`    | `{}`              | Configure [decryption](https://fluxcd.io/flux/components/kustomize/kustomizations/#decryption)                                             |
 | `metadata: labels:`          | `{[ string]: string}`                               | `{}`              | Custom labels                                                                                                                              |
 | `metadata: annotations:`     | `{[ string]: string}`                               | `{}`              | Custom annotations                                                                                                                         |
diff --git a/modules/flux-git-sync/templates/config.cue b/modules/flux-git-sync/templates/config.cue
@@ -68,6 +68,13 @@ import (
 			version?:            string
 		}
 	}]
+
+	decryption?: {
+		provider: string
+		secretRef?: {
+			name: string
+		}
+	}
 }
 
 // Instance takes the config values and outputs the Kubernetes objects.
diff --git a/modules/flux-git-sync/templates/kustomization.cue b/modules/flux-git-sync/templates/kustomization.cue
@@ -43,5 +43,9 @@ import (
 		if #config.patches != _|_ {
 			patches: [for p in #config.patches {patch: json.Marshal(p.patch), target: p.target}]
 		}
+
+		if #config.decryption != _|_ {
+			decryption: #config.decryption
+		}
 	}
 }
diff --git a/modules/flux-oci-sync/README.md b/modules/flux-oci-sync/README.md
@@ -45,5 +45,6 @@ timoni -n flux-system delete my-repo-sync
 | `substituteFrom:`              | `[...{kind: string, name: string, optional: bool}]` | `[]`        | List of ConfigMaps and Secrets to use for variable substitution                                                                            |
 | `dependsOn:`                   | `[...{name: string}]`                               | `{}`        | List of dependencies                                                                                                                       |
 | `patches:`                     | `[...{patch: {...}}]`                               | `{}`        | Strategic merge and JSON patches, defined as inline YAML objects                                                                           |
+| `decryption:`                  | `{provider: string, secretRef: { name: string}}`    | `{}`        | Configure [decryption](https://fluxcd.io/flux/components/kustomize/kustomizations/#decryption)                                             |
 | `metadata: labels:`            | `{[ string]: string}`                               | `{}`        | Custom labels                                                                                                                              |
 | `metadata: annotations:`       | `{[ string]: string}`                               | `{}`        | Custom annotations                                                                                                                         |
diff --git a/modules/flux-oci-sync/templates/config.cue b/modules/flux-oci-sync/templates/config.cue
@@ -79,6 +79,13 @@ import (
 			version?:            string
 		}
 	}]
+
+	decryption?: {
+		provider: string
+		secretRef?: {
+			name: string
+		}
+	}
 }
 
 // Instance takes the config values and outputs the Kubernetes objects.
diff --git a/modules/flux-oci-sync/templates/kustomization.cue b/modules/flux-oci-sync/templates/kustomization.cue
@@ -39,5 +39,8 @@ import (
 		if #config.patches != _|_ {
 			patches: [for p in #config.patches {patch: json.Marshal(p.patch), target: p.target}]
 		}
+		if #config.decryption != _|_ {
+			decryption: #config.decryption
+		}
 	}
 }

Original file line number	Diff line number	Diff line change
`@@ -68,6 +68,13 @@ import (`
`68`	`68`	`version?: string`
`69`	`69`	`}`
`70`	`70`	`}]`
	`71`	`+`
	`72`	`+ decryption?: {`
	`73`	`+ provider: string`
	`74`	`+ secretRef?: {`
	`75`	`+ name: string`
	`76`	`+ }`
	`77`	`+ }`
`71`	`78`	`}`
`72`	`79`
`73`	`80`	`// Instance takes the config values and outputs the Kubernetes objects.`
Original file line number	Diff line number	Diff line change
`@@ -43,5 +43,9 @@ import (`
`43`	`43`	`if #config.patches != _\|_ {`
`44`	`44`	`patches: [for p in #config.patches {patch: json.Marshal(p.patch), target: p.target}]`
`45`	`45`	`}`
	`46`	`+`
	`47`	`+ if #config.decryption != _\|_ {`
	`48`	`+ decryption: #config.decryption`
	`49`	`+ }`
`46`	`50`	`}`
`47`	`51`	`}`
Original file line number	Diff line number	Diff line change
`@@ -79,6 +79,13 @@ import (`
`79`	`79`	`version?: string`
`80`	`80`	`}`
`81`	`81`	`}]`
	`82`	`+`
	`83`	`+ decryption?: {`
	`84`	`+ provider: string`
	`85`	`+ secretRef?: {`
	`86`	`+ name: string`
	`87`	`+ }`
	`88`	`+ }`
`82`	`89`	`}`
`83`	`90`
`84`	`91`	`// Instance takes the config values and outputs the Kubernetes objects.`
Original file line number	Diff line number	Diff line change
`@@ -39,5 +39,8 @@ import (`
`39`	`39`	`if #config.patches != _\|_ {`
`40`	`40`	`patches: [for p in #config.patches {patch: json.Marshal(p.patch), target: p.target}]`
`41`	`41`	`}`
	`42`	`+ if #config.decryption != _\|_ {`
	`43`	`+ decryption: #config.decryption`
	`44`	`+ }`
`42`	`45`	`}`
`43`	`46`	`}`