flux v2.9.5

Kustomization.spec.decryption

Decrypt Kubernetes secrets before applying them on the cluster.

Kustomization.spec.decryption fields and descriptions
Field / Type	Description
provider `string` required	Provider is the name of the decryption engine. `enum: ["sops"]`
secretRef `object`	The secret name containing the private OpenPGP keys used for decryption. A static credential for a cloud provider defined inside the Secret takes priority to secret-less authentication with the ServiceAccountName field.
serviceAccountName `string`	ServiceAccountName is the name of the service account used to authenticate with KMS services from cloud providers. If a static credential for a given cloud provider is defined inside the Secret referenced by SecretRef, that static credential takes priority.