Testing SS on amd host

components/security/controllers/base/.sops.yaml

@@ -0,0 +1,5 @@
+creation_rules:
+  - path_regex: sealed-secret-seed-tls.yaml$
+    encrypted_regex: "^(data)$"
+    age: 
+      - age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq

components/security/controllers/base/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: security
+resources:
+  - namespace.yaml
+  - rbac.yaml
+  - sealed-secret-seed-tls.yaml
+  - sealed-secrets.yaml

components/security/controllers/base/namespace.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: security
+  labels:
+    app.kubernetes.io/component: security
+    toolkit.fluxcd.io/tenant: platform-team
+    pod-security.kubernetes.io/enforce: privileged

components/security/controllers/base/sealed-secrets.yaml

@@ -0,0 +1,20 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: sealed-secrets
+spec:
+  interval: 1h
+  url: https://bitnami-labs.github.io/sealed-secrets
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: sealed-secrets
+spec:
+  serviceAccountName: flux
+  interval: 1h
+  chartRef:
+    kind: HelmChart
+    name: sealed-secrets
+  values:
+    secretName: sealed-secrets-seed-key

components/security/controllers/dev-amd64/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base