---
sealed_secrets_namespace: kube-system
sealed_secrets_chart_version: "2.19.0"

# kubeseal CLI version (empty = latest from GitHub)
sealed_secrets_cli_version: ""

sealed_secrets_kubeconfig: "/home/{{ ansible_user }}/.kube/config"

# Path on the manager node where the master key backup is saved (mode 0600)
sealed_secrets_backup_path: "/home/{{ ansible_user }}/.kube/sealed-secrets-key-backup.yaml"