fixin

components/storage/controllers/base/kustomization.yaml

@@ -4,5 +4,4 @@ namespace: storage
 resources: 
   - namespace.yaml
   - rbac.yaml
-  - nfs-config.yaml
-  - nfs-subdir-external-provisioner.yaml
+

components/storage/controllers/base/nfs-config.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name: nfs-provisioner-config
-    namespace: storage
-type: Opaque
-stringData:
-    values.yaml: ENC[AES256_GCM,data:KcUlD4am3GC/KNXxPnTYaLDky5DnwT9QiIpG50ECarC5E7EzFvsBlGgyR5LueSmC42gssmygIgUWvIknCSF6HpzU,iv:cx6qcgoYUd7Oy4Jln3JGzpC0BBqsmU47o1CGBZ4qf98=,tag:NXVvQ166RQK0fBpUqOIlPQ==,type:str]
-sops:
-    age:
-        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOVE1wV0RhSUJFTUZTWUhE
-            a05YVlRUZ3dhT3cxeEZialpmNXA2MnhLbEN3Cit2eXhLZDUvVUVRS0Q0aGgySyth
-            WENKK25mNnZKWHlQMVByNkxtTE0rK0EKLS0tIHM2MGVWcjZ6T1EzTU5yMkIyeFl2
-            V2dRcFdZcWRKVDkrV2MzRlYvVzByT3cK/GW67Q8skk692h6Z4IuUDCHbSWC/px4f
-            i25BNm4Na+Y7lT6h4QHBKMx2qkvRV5FId5F3W1E5sBBIS0LWnP/6Lw==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-12-06T14:34:00Z"
-    mac: ENC[AES256_GCM,data:m2LMusbcCX4QBG9rNwXmQ6uBYLZZjc9UWgdkM6+cSTFL/RpCCAcXkoafPAlDI1OdIqcTZTwEDJ21k8nOV7WT6Eeno0BZmxm+7LNlVwzlGw1vzmhC/MwMcVn8TChPrBXOfzQZ2+/w4fPvnExA67EiDdhcI2MRj58wV2BQEb9miGY=,iv:sALVCuUFkeZnHi/eTaMiR2HBWnTH1X2k0BR97CrSmKI=,tag:qE1NhT3wAZoqhbDYIpDQlQ==,type:str]
-    encrypted_regex: ^(stringData)$
-    version: 3.11.0

components/storage/controllers/base/nfs/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: storage
+resources: 
+  - nfs-subdir-external-provisioner.yaml

components/storage/controllers/dev-arm64/kustomization.yaml

@@ -1,4 +1,11 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources: 
-  - ../base
+  - ../base
+  - ../base/nfs
+secretGenerator:
+  - name: nfs-provisioner-config
+    files:
+      - values.yaml=./nfs/nfs-config.yaml
+generatorOptions:
+  disableNameSuffixHash: true

components/storage/controllers/dev-arm64/nfs/.sops.yaml

@@ -1,5 +1,5 @@
 creation_rules:
   - path_regex: nfs-config.yaml$
-    encrypted_regex: "^(stringData)$"
+    encrypted_regex: "^(nfs)$"
     age: 
       - age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq

components/storage/controllers/dev-arm64/nfs/nfs-config.yaml

@@ -0,0 +1,18 @@
+nfs:
+    path: ENC[AES256_GCM,data:8HEV6/qPUHdwAnNkzXUjBnQ3Xf2Ea3kQ7t+Gu5FoiA==,iv:CvoDqqPrut7OqEEMLDXh5X9jW5aaKK7Y3gpGm8nTta8=,tag:SG5rN+orDcGvvj+vCwPVNA==,type:str]
+    server: ENC[AES256_GCM,data:1CFxEkbv+LEICGo=,iv:6VKteyWM/ynkN5eiYvAhISBY9RTRo7UsBu2K6K7QI1Y=,tag:xXw4mqi4bM6rzWeN0yJbWA==,type:str]
+sops:
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0WEFFZkVVbzlTeGhueVlR
+            MjQ4QlJEVVFSWVgwTE5PamE4bEp1WXFaWVhzCmhBaEp2WVJmQzI0K08zN2drSUlI
+            VVd2ekJSZFozcFJERmRMWXFkWVZDbG8KLS0tIGZzWTRtNXFaeGFPMS9zaURaWDQ3
+            L2YzbG1yT1p2dnl5V3d0bVJRZ205ZjQKnj5uH/35GJl6y3jrAW/f6XjW29fFn2TS
+            lWyX4RESe3x+hQbx53PUz9Exqj2UPG9IXUzLxca4r5N7Y1ScbkXsPQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-12-06T14:55:37Z"
+    mac: ENC[AES256_GCM,data:xStfwYj3KJl/PcNhgz1JI/ilnEd1FPewWMcf8Tyt1yQfd0x9cbnCfoPujie1tEqoPHXIMNvyrRXt4R+CwhVcHnuH72AFiwXdF0mynOQbkZh5gxYkKSThqvL4vQn3jPI4/dWnfbB/K51x2gcj5pVv7IClrBR5tvvYRAWS8HV2924=,iv:/j38bjZA0H5p2/TEgbOB03/OhZrBn8szahlf90j24Y8=,tag:MPkMCYrKKCH7fU/WnQgjPw==,type:str]
+    encrypted_regex: ^(nfs)$
+    version: 3.11.0