# Sealed Secrets controller — encrypts secrets so they can live in Git.
# Install:
#   helm repo add sealed-secrets https://bitnami.github.io/sealed-secrets
#   helm upgrade --install sealed-secrets sealed-secrets/sealed-secrets \
#     -n kube-system -f gitops/sealed-secrets/values.yaml
#
# fullnameOverride matches the default the kubeseal CLI expects
# (sealed-secrets-controller in kube-system), so kubeseal works without flags.
fullnameOverride: sealed-secrets-controller

image:
  # Seeded into Harbor abrban/ project from ghcr.io/bitnami (proxy-ghcr returned 401
  # for kubelet pulls; see seed job pattern in gitops/jobs/seed-ci-images.yaml).
  registry: registry.abrban.com
  repository: abrban/sealed-secrets-controller