🐛(CI) improve submodule

- remove deplucate declaration
- simplify helmfile
- use symlink

.github/workflows/deploy.yml

@@ -29,7 +29,7 @@ jobs:
         name: Load sops secrets
         uses: rouja/actions-sops@main
         with:
-          secret-file: .github/workflows/secrets/numerique-gouv/impress/secrets.enc.env
+          secret-file: secrets/numerique-gouv/impress/secrets.enc.env
           age-key: ${{ secrets.SOPS_PRIVATE }}
       -
         name: Call argocd github webhook

.github/workflows/docker-hub.yml

@@ -36,7 +36,7 @@ jobs:
         name: Load sops secrets
         uses: rouja/actions-sops@main
         with:
-          secret-file: .github/workflows/secrets/numerique-gouv/impress/secrets.enc.env
+          secret-file: secrets/numerique-gouv/impress/secrets.enc.env
           age-key: ${{ secrets.SOPS_PRIVATE }}
       -
         name: Docker meta
@@ -80,7 +80,7 @@ jobs:
         name: Load sops secrets
         uses: rouja/actions-sops@main
         with:
-          secret-file: .github/workflows/secrets/numerique-gouv/impress/secrets.enc.env
+          secret-file: secrets/numerique-gouv/impress/secrets.enc.env
           age-key: ${{ secrets.SOPS_PRIVATE }}
       -
         name: Docker meta
@@ -125,7 +125,7 @@ jobs:
         name: Load sops secrets
         uses: rouja/actions-sops@main
         with:
-          secret-file: .github/workflows/secrets/numerique-gouv/impress/secrets.enc.env
+          secret-file: secrets/numerique-gouv/impress/secrets.enc.env
           age-key: ${{ secrets.SOPS_PRIVATE }}
       -
         name: Docker meta
@@ -175,7 +175,7 @@ jobs:
         name: Load sops secrets
         uses: rouja/actions-sops@main
         with:
-          secret-file: .github/workflows/secrets/numerique-gouv/impress/secrets.enc.env
+          secret-file: secrets/numerique-gouv/impress/secrets.enc.env
           age-key: ${{ secrets.SOPS_PRIVATE }}
       -
         name: Call argocd github webhook

.github/workflows/impress.yml

@@ -227,7 +227,7 @@ jobs:
         name: Load sops secrets
         uses: rouja/actions-sops@main
         with:
-          secret-file: .github/workflows/secrets/numerique-gouv/impress/secrets.enc.env
+          secret-file: secrets/numerique-gouv/impress/secrets.enc.env
           age-key: ${{ secrets.SOPS_PRIVATE }}
 
       - name: Install gettext (required to make messages)

.gitmodules

@@ -1,8 +1,3 @@
-[submodule ".github/workflows/secrets"]
-	path = .github/workflows/secrets
-	url = https://github.com/numerique-gouv/secrets.git
-	branch = main
-[submodule "src/helm/secrets"]
-	path = src/helm/secrets
-	url = https://github.com/numerique-gouv/secrets.git
-	branch = main
+[submodule "secrets"]
+	path = secrets
+	url = ../secrets

src/helm/env.d/preprod/secrets.enc.yaml

@@ -0,0 +1 @@
+../../../../secrets/numerique-gouv/impress/env/preprod/secrets.enc.yaml

src/helm/env.d/production/secrets.enc.yaml

@@ -0,0 +1 @@
+../../../../secrets/numerique-gouv/impress/env/production/secrets.enc.yaml

src/helm/env.d/staging/secrets.enc.yaml

@@ -0,0 +1 @@
+../../../../secrets/numerique-gouv/impress/env/staging/secrets.enc.yaml

src/helm/helmfile.yaml

@@ -48,7 +48,7 @@ releases:
     namespace: {{ .Namespace }}
     chart: ./extra
     secrets:
-      - secrets/numerique-gouv/impress/env/{{ .Environment.Name }}/secrets.enc.yaml
+      - env.d/{{ .Environment.Name }}/secrets.enc.yaml
 
   - name: impress
     version: {{ .Values.version }}
@@ -57,7 +57,7 @@ releases:
     values:
       - env.d/{{ .Environment.Name }}/values.impress.yaml.gotmpl
     secrets:
-      - {{ ne .Environment.Name "dev" | ternary "secrets/numerique-gouv/impress/env" "env.d" }}/{{ .Environment.Name }}/secrets.enc.yaml
+      - env.d/{{ .Environment.Name }}/secrets.enc.yaml
 
 environments:
   dev:
@@ -69,14 +69,14 @@ environments:
     values:
       - version: 0.0.1
     secrets:
-      - secrets/numerique-gouv/impress/env/{{ .Environment.Name }}/secrets.enc.yaml
+      - env.d/{{ .Environment.Name }}/secrets.enc.yaml
   preprod:
     values:
       - version: 0.0.1
     secrets:
-      - secrets/numerique-gouv/impress/env/{{ .Environment.Name }}/secrets.enc.yaml
+      - env.d/{{ .Environment.Name }}/secrets.enc.yaml
   production:
     values:
       - version: 0.0.1
     secrets:
-      - secrets/numerique-gouv/impress/env/{{ .Environment.Name }}/secrets.enc.yaml
+      - env.d/{{ .Environment.Name }}/secrets.enc.yaml