move dashboard, add sealed secrets

apps/kube-dashboard/base/kube-dashboard-user-secret.yaml

@@ -1,3 +1,6 @@
+# Create long-live bearer token
+# retrieve with: `kubectl get secret dashboard-user -n kubernetes-dashboard -o jsonpath={".data.token"} | base64 -d`
+
 apiVersion: v1
 kind: Secret
 metadata:

infrastructure/06-sealed-secrets/kustomization.yaml

@@ -0,0 +1,11 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: sealed-secrets
+
+helmCharts:
+- name: sealed-secrets
+  includeCRDs: true
+  version: 2.15.2
+  repo: https://bitnami-labs.github.io/sealed-secrets
+  # valuesFile: base/values.yaml