Flux
GitOps reconciler running in both clusters โ pulls manifests from Gitea (with Codeberg as the documented migration target) and applies them via Kustomize + SOPS decryption.
GitOps reconciler running in both clusters โ pulls manifests from Gitea (with Codeberg as the documented migration target) and applies them via Kustomize + SOPS decryption.
End-to-end walkthrough of the homelab's GitOps loop โ how a single Renovate-opened pull request becomes a digest-pinned container image running in production, touching every layer of the stack along the way.
Encrypt Kubernetes secrets at rest with Mozilla SOPS and age, decrypt them in-cluster via the Flux SOPS provider.
Rotating the in-cluster age key without breaking Flux reconciliation โ walk-through of regenerating the key, re-encrypting every committed Secret, and rolling the cluster onto the new key without downtime.