Question: Grafana admin password in separate secret file

[svdo]

Hi!

Thank you for this tool, it's very powerful!

I have a question: we are using gitops (argocd) and managing our secrets using sops/kubeseal. Because of that, I need the Grafana admin password (or the entire grafana-config secret if needed) to be in a separate file. Using sops I can then guarantee that the password is encrypted also in the git repo.

Is there a way to accomplish this? I am now trying to remove the secret from the Jsonnet-generated output, and then adding my own, but this doesn't feel like the right way and causes issues (around who should own that secret I believe).

Thank you for your thoughts!