added values for nfs helm release

components/storage/controllers/base/.sops.yaml

@@ -0,0 +1,5 @@
+creation_rules:
+  - path_regex: nfs-config.yaml$
+    encrypted_regex: "^(stringData)$"
+    age: 
+      - age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq

components/storage/controllers/base/kustomization.yaml

@@ -3,4 +3,5 @@ kind: Kustomization
 namespace: storage
 resources: 
   - namespace.yaml
+  - nfs-config.yaml
   - nfs-subdir-external-provisioner.yaml

components/storage/controllers/base/namespace.yaml

@@ -3,6 +3,6 @@ kind: Namespace
 metadata:
   name: storage
   labels:
-    app.kubernetes.io/component: admission
+    app.kubernetes.io/component: storage
     toolkit.fluxcd.io/tenant: platform-team
     pod-security.kubernetes.io/enforce: baseline

components/storage/controllers/base/nfs-config.yaml

@@ -0,0 +1,26 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: nfs-provisioner-config
+    namespace: storage
+type: Opaque
+stringData:
+    values.yaml:
+        nfs:
+            path: ENC[AES256_GCM,data:N0hfjKR7uEbr+qX1ayasuh5Gbuw8m0kR63swdPYb,iv:Yj/tk4BpJ2jp4m1sSLL131UJ2+eKdBBlgfYe1KqDaFU=,tag:BqV9r8NoVKdZZxGZIMrF0Q==,type:str]
+            server: ENC[AES256_GCM,data:85mtz+kBLx/p3jI=,iv:nAwUm5wCjNmCIBThjx1YcsAJaeKMH+hXYv188IySTKE=,tag:Zo54yAtD3sTWFUpaQKfwIg==,type:str]
+sops:
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTd1dQdEttMG1nVURNTVdI
+            a0VVR1dtQnN3MCszYUl2SlJYMXhLK0pyQUVVCnpVeEF2MmY2MFk0ZEJjSkc0Tyts
+            NjBPbnpPT2dNNWpLMDNQUjhZTnBsT28KLS0tIGlkcU90VFhQMFdRTHV6bHBIU2cx
+            a1JiQTVkdDZBdUxCL1JSR0trMDRCUXMKODjDzI8pHcXM+ckKD4YSkOg0vp/wGs+X
+            AGzQzWAOd9zr4Zk1ZXIiVPx2DIPtS4IPt+ESdrFzX+HJBGpEbVFgXA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-12-06T14:25:13Z"
+    mac: ENC[AES256_GCM,data:6lQzd5Zw2Y97RfUPQXsv+BhxPipAD7/2kDnQImGYAB4mNJoRIcFc3Z+jaIEgE6AUqE+HRJrdbrrXJ93pFEw7w9v9BbWf9fCUfsL5WTZmQBsP6+1JoOhISVyVaTa0CCZ5ZXpdizugvKEcZZcLhfIvOj9uLXxH1bFBYAbunbAVEos=,iv:AkZ7nqxKFmApWkYdac8tMPS1rJJwTxhBlqnPc1VNMIc=,tag:bVNU7AhfSNOta5i2PWY0Sg==,type:str]
+    encrypted_regex: ^(stringData)$
+    version: 3.11.0

components/storage/controllers/base/nfs-subdir-external-provisioner.yaml

@@ -34,3 +34,7 @@ spec:
     timeout: 9m
     remediation:
       retries: 3
+  valuesFrom:
+    - kind: Secret
+      name: nfs-provisioner-config
+      valuesKey: values.yaml