From 7e1f03e6e773e0b59fcc2f202b979d4bd9fce7e9 Mon Sep 17 00:00:00 2001
From: HDW <wernerseck@gmx.de>
Date: Sat, 25 Apr 2026 09:15:56 +0200
Subject: [PATCH] Add Sealed Secrets

---
 .../sealedsecrets/sealed-secrets-app.yaml     | 20 +++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 infrastructure/sealedsecrets/sealed-secrets-app.yaml

diff --git a/infrastructure/sealedsecrets/sealed-secrets-app.yaml b/infrastructure/sealedsecrets/sealed-secrets-app.yaml
new file mode 100644
index 0000000..32eb91a
--- /dev/null
+++ b/infrastructure/sealedsecrets/sealed-secrets-app.yaml
@@ -0,0 +1,20 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: sealed-secrets-controller
+  namespace: argocd
+spec:
+  project: default
+  source:
+    # Das ist das spezifische Repo von Bitnami Labs
+    repoURL: https://bitnami-labs.github.io/sealed-secrets
+    targetRevision: 2.15.0 # Oder die aktuellste Version
+    chart: sealed-secrets
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: kube-system # Der Controller sollte im System-Namespace laufen
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    createNamespace: true