8:59AM INF [local-kind > my-workload > apply] Plugin execution succeeded:

Decrypting secrets
Validating Kubernetes manifests
Applying Kubernetes manifests
Target cluster 'https://127.0.0.1:45811' (nodes: dev-cluster-control-plane, 2+)

Changes

Namespace  Name  Kind  Age  Op  Op st.  Wait to  Rs  Ri  

Op:      0 create, 0 delete, 0 update, 0 noop, 0 exists
Wait to: 0 reconcile, 0 delete, 0 noop

Succeeded
Encrypting secrets

#! /usr/bin/env bash

function prepare() {
  local action="$1"
  local exit_code=0
  if [[ -e "$MYKS_RENDERED_APP_DIR"/static ]]; then
    case "$action" in
    "encrypt")
      echo "Encrypting secrets"
      find "$MYKS_RENDERED_APP_DIR"/static -type f -name "*.sops.yaml" -exec sops -e -i {} \;
      exit_code=$?
      ;;
    "decrypt")
      echo "Decrypting secrets"
      find "$MYKS_RENDERED_APP_DIR"/static -type f -name "*.sops.yaml" -exec sops -d -i {} \;
      exit_code=$?
      ;;
    esac
  fi
  if [[ "$exit_code" == 1 ]]; then
    echo "Failed to $action secrets"
  fi
  return $exit_code
}

function validate() {
  echo "Validating Kubernetes manifests"
  kubeconform \
    -schema-location 'https://raw.githubusercontent.com/yannh/kubernetes-json-schema/master/{{.NormalizedKubernetesVersion}}-standalone{{.StrictSuffix}}/{{.ResourceKind}}{{.KindSuffix}}.json' \
    -strict \
    -skip "CustomResourceDefinition,NetworkAttachmentDefinition" \
    "$MYKS_RENDERED_APP_DIR"
  return $?
}

function apply() {
  echo "Applying Kubernetes manifests"
  set -x
  kapp --wait=false --yes deploy -a "$MYKS_APP" -f "$MYKS_RENDERED_APP_DIR"
  set +x
  return $?
}

main() {
  if ! prepare "decrypt"; then
    exit 1
  fi
  trap "prepare encrypt" EXIT
  if ! validate; then
    echo "Validation failed"
    exit 1
  fi
  if ! apply; then
    echo "Failed to apply manifests"
    exit 1
  fi
}

main