💚(ci) improve submodule usage

- remove deplucate declaration
- simplify helmfile
- use symlink

.github/workflows/docker-hub.yml

@@ -42,7 +42,7 @@ jobs:
         name: Load sops secrets
         uses: rouja/actions-sops@main
         with:
-          secret-file: .github/workflows/secrets/numerique-gouv/people/secrets.enc.env
+          secret-file: secrets/numerique-gouv/people/secrets.enc.env
           age-key: ${{ secrets.SOPS_PRIVATE }}
       -
         name: Login to DockerHub
@@ -86,7 +86,7 @@ jobs:
         name: Load sops secrets
         uses: rouja/actions-sops@main
         with:
-          secret-file: .github/workflows/secrets/numerique-gouv/people/secrets.enc.env
+          secret-file: secrets/numerique-gouv/people/secrets.enc.env
           age-key: ${{ secrets.SOPS_PRIVATE }}
       -
         name: Login to DockerHub
@@ -128,7 +128,7 @@ jobs:
         name: Load sops secrets
         uses: rouja/actions-sops@main
         with:
-          secret-file: .github/workflows/secrets/numerique-gouv/people/secrets.enc.env
+          secret-file: secrets/numerique-gouv/people/secrets.enc.env
           age-key: ${{ secrets.SOPS_PRIVATE }}
       -
         name: Call argocd github webhook

.github/workflows/people.yml

@@ -347,7 +347,7 @@ jobs:
         name: Load sops secrets
         uses: rouja/actions-sops@main
         with:
-          secret-file: .github/workflows/secrets/numerique-gouv/people/secrets.enc.env
+          secret-file: secrets/numerique-gouv/people/secrets.enc.env
           age-key: ${{ secrets.SOPS_PRIVATE }}
       
       - name: Setup Node.js

.gitmodules

@@ -1,8 +1,3 @@
-[submodule ".github/workflows/secrets"]
-	path = .github/workflows/secrets
-	url = https://github.com/numerique-gouv/secrets.git
-	branch = main
-[submodule "src/helm/secrets"]
-	path = src/helm/secrets
-	url = https://github.com/numerique-gouv/secrets.git
-	branch = main
+[submodule "secrets"]
+	path = secrets
+	url = ../secrets

src/helm/env.d/staging/secrets.enc.yaml

@@ -0,0 +1 @@
+../../../../secrets/numerique-gouv/people/env/staging/secrets.enc.yaml

src/helm/helmfile.yaml

@@ -33,7 +33,7 @@ releases:
     namespace: {{ .Namespace }}
     chart: ./extra
     secrets:
-      - {{ ne .Environment.Name "dev" | ternary "secrets/numerique-gouv/people/env" "env.d" }}/{{ .Environment.Name }}/secrets.enc.yaml
+      - env.d/{{ .Environment.Name }}/secrets.enc.yaml
 
   - name: desk
     version: {{ .Values.version }}
@@ -42,7 +42,7 @@ releases:
     values:
       - env.d/{{ .Environment.Name }}/values.desk.yaml.gotmpl
     secrets:
-      - {{ ne .Environment.Name "dev" | ternary "secrets/numerique-gouv/people/env" "env.d" }}/{{ .Environment.Name }}/secrets.enc.yaml
+      - env.d/{{ .Environment.Name }}/secrets.enc.yaml
 
 environments:
   dev:
@@ -54,5 +54,5 @@ environments:
     values:
       - version: 0.0.1
     secrets:
-      - {{ ne .Environment.Name "dev" | ternary "secrets/numerique-gouv/people/env" "env.d" }}/{{ .Environment.Name }}/secrets.enc.yaml
+      - env.d/{{ .Environment.Name }}/secrets.enc.yaml