using secret from external repo

kubernetes/apps/cert-manager/cert-manager.yaml

@@ -5,16 +5,19 @@ metadata:
   namespace: cert-manager
 spec:
   interval: 1h
-  path: ./kubernetes/apps/cert-manager/app
+  path: ./cert-manager
   prune: true
   sourceRef:
     kind: GitRepository
     namespace: flux-system
-    name: home-cluster-ops
+    name: home-cluster-ops-secret
+  dependsOn:
+    - name: repositories
+      namespace: flux-system
   decryption:
     provider: sops
     secretRef:
-      name: sops-gpg
+      name: sops-age
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -29,7 +32,7 @@ spec:
   sourceRef:
     kind: GitRepository
     namespace: flux-system
-    name: home-cluster-ops
+    name: flux-system
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -44,10 +47,9 @@ spec:
   sourceRef:
     kind: GitRepository
     namespace: flux-system
-    name: home-cluster-ops
+    name: flux-system
   dependsOn:
-    - name: repositories
-      namespace: flux-system
+    - name: cert-manager-secrets
     - name: cert-manager
   postBuild:
     substituteFrom:

kubernetes/apps/cilium/cilium.yaml

@@ -10,4 +10,4 @@ spec:
   sourceRef:
     kind: GitRepository
     namespace: flux-system
-    name: home-cluster-ops
+    name: flux-system

kubernetes/infrastructure/repositories/repositories.yaml

@@ -14,6 +14,20 @@ spec:
   url: https://github.com/3dwardch3ng/home-cluster-ops.git
 ---
 apiVersion: source.toolkit.fluxcd.io/v1
+kind: GitRepository
+metadata:
+  name: home-cluster-ops-secrets
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  ref:
+    branch: main
+  secretRef:
+    name: flux-system
+  timeout: 60s
+  url: https://github.com/3dwardch3ng/home-cluster-ops-secrets.git
+---
+apiVersion: source.toolkit.fluxcd.io/v1
 kind: HelmRepository
 metadata:
   name: podinfo