From b0ce23a49905d5fdd9899ef98134d1268dab88b7 Mon Sep 17 00:00:00 2001
From: Dreaded_X <tim@huizinga.dev>
Date: Thu, 18 Dec 2025 02:56:42 +0100
Subject: [PATCH] feat: Allow cnpg garage credentials reflection

---
 controllers/cnpg/staging/secret-s3-garage.enc.yaml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/controllers/cnpg/staging/secret-s3-garage.enc.yaml b/controllers/cnpg/staging/secret-s3-garage.enc.yaml
index fe4239f..92a73ab 100644
--- a/controllers/cnpg/staging/secret-s3-garage.enc.yaml
+++ b/controllers/cnpg/staging/secret-s3-garage.enc.yaml
@@ -3,6 +3,8 @@ kind: Secret
 metadata:
     name: s3-garage
     namespace: cnpg-system
+    annotations:
+        reflector.v1.k8s.emberstack.com/reflection-allowed: "true"
 type: Opaque
 stringData:
     ACCESS_KEY_ID: ENC[AES256_GCM,data:TOEQMG/kHs5XUk77ijyV089ZTq1dKsoZUas=,iv:mVDOkl5qOxGdvCvdcXUuUjX85oKqbd+n5maHsKwCiFg=,tag:pho0oWPTwtM6lGQ2vA1d5A==,type:str]
@@ -27,8 +29,8 @@ sops:
             K09tZGI0Z2w0eXh5eHcvcEttMy82aU0K2fnCDfYIShzw2Zipof+C8zf9pcOmiDg9
             2SCiIfAJs9MB3n078P068z77KpvdlJYOi9pUTKSBhNw+mBI24y6X6A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-12-15T03:46:42Z"
-    mac: ENC[AES256_GCM,data:UG9rSQ4ep7Ln4g5QCtvD6U90Oc8iWpni+kypMpJ+AQM8LC0TTs9zFQgcxmo2wjZn38Fp+br/5KC172SqBNG4Q1yXhlRiqiIeyx9ynrZeceRSqHaaruB1hj83/0FwahqjB/t6yutWIfnp00UC92mMKGlef48UNZ8IW17e5uHE0m4=,iv:LvR4BEkgAr6PJ8fYATFois4j8/rgztn/Jggj/mFgCIk=,tag:W38qDd1RkCdK3bVMqOVnjA==,type:str]
+    lastmodified: "2025-12-18T01:50:56Z"
+    mac: ENC[AES256_GCM,data:Wul3Dc7nvnBwmuTp+yIuaMRg//ui4rhZFsOlfOYeUx7z5ObGA0KIIgk8BM73/R4Hkzg2G/wKrUdWRa8wXFAwxzBEtFaXUgaSJhUjzMnDtVp+PiTLYWSYt8rx8S+lKbXk+2KLQOaHi10XO3P5JIXtEhP6K2a4rONwsi2224QPSec=,iv:OW4qY4oJXhi/EpktCW/9u8mhQQSaizc89lRFecOPo5w=,tag:fZqV8/0Nm/KGfGgmXNC4kg==,type:str]
     pgp:
         - created_at: "2025-12-11T23:56:15Z"
           enc: |-