apiVersion: v1
kind: Secret
metadata:
  name: n8n-secret
  namespace: n8n
  annotations:
    # CreateOnly: ArgoCD creates this secret if it doesn't exist but never overwrites it.
    # Populate the key manually before first deploy:
    #   kubectl create secret generic n8n-secret \
    #     --from-literal=encryption-key='<value-from-vaultwarden>' \
    #     -n n8n --dry-run=client -o yaml | kubectl apply -f -
    argocd.argoproj.io/sync-options: "CreateOnly=true"
type: Opaque