cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 1c20f5440fd8eb73c9bb34ada4d06007eac3a139
parent 4aaaa04c5e0885e7f30c759bf6b43a7d61a24d08
Author: MTRNord <mtrnord1@gmail.com>
Date:   Fri,  4 Apr 2025 15:22:44 +0200

prepare pg for plane

Diffstat:
Minfrastructure/configs/cnpg-cluster.yaml | 129+++++++++++++++++++++++++++++++++++++++++++++++++------------------------------
1 file changed, 80 insertions(+), 49 deletions(-)

diff --git a/infrastructure/configs/cnpg-cluster.yaml b/infrastructure/configs/cnpg-cluster.yaml @@ -11,14 +11,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOXlBaDFkbWY4b2dxRzN1 - SkZNaFByTmlrbllrb2JYZXJmSmp0eThYdlNZCkpkSG40ZG11L0lab2RGa2UvL1BV - cmxGVkFDTGhWby9DUzV1dEFxZTFKQjAKLS0tIDNlQ3lyT05LRW1QbE5DNzJSOUdy - clBZVkFHcjFLemdFd1p1M0ttTmsxLzgKczm43BeWp2u9p9WJ2ncGMFvI/0HyJo/e - 9YeeQIAv4EQHNyikvxLvpOuTXOnkqhO5yQzU5ghelJ8f03PiQMHZpg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKaEE3UmpFaFYycTdIeDdl + NlRXZ2ljWkJ5UDNxUm1wTGU3c0RNNUxnRGhJCkdDV1krTndVVUQ3Nm9QYUlPRGR4 + b1liY0czZ3FGdVpFSUVoQUlzcCtJUXcKLS0tIEYxL3RFZ0RFY2ZVdnBhVGJ2SEs4 + U1RHUmNHMEw1MUlvNjVybUY0V056K2sKbVD14Znhs9PBMyGdNXhSxPyPb8G+st6y + RMKT7TfGb5wmXxKF1QqpxlJzh2HDLle3o8ijCOOxPjQsfVzuiC1/6Q== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-04T10:27:39Z" - mac: ENC[AES256_GCM,data:UuVjYm6og6B/YiOvgL2dlvX9oSOY9xpfU73ypSfpnIwVQokr5Xj04vjNTok37ozKXsgwne3FSgBC7qe+A84ZSHHLhlXcCcH2PSMrGeOymo6Kcnw+VJ0NoTKAFl4Uu8k+oZMUsMQ+IhlymvrYdoUMDuXWc7B0OrXc5qhf0jyjfys=,iv:9TwvINSW6van1A8hAnpEW1CXAiGXibhY1hEldY4BcVc=,tag:DQ3vbhWZWUIjmRhfOQF09Q==,type:str] + lastmodified: "2025-04-04T13:22:20Z" + mac: ENC[AES256_GCM,data:n9Wga18lDe/bf3bt++o+YLJw3nhLHBpaTuMq9Lan0sSYlVdXLs2nGe7IphOy/U+FV21MnS1/J/7uq7IloI2R771J8DjkBQ1l7OQsCVA8pJ71bI3mT4UWXGkQGMaF9C9A5zjyDYbAtjI7mdxAeWa0Ho/lwd1sv8SLXxqGUYgHAtM=,iv:E5+SKY0+0IdxI0cjpebDlSqBDlk7BlppGe/jf7fI8PA=,tag:/IAZO9fQCaid5N/J4wqpAg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -30,8 +30,8 @@ metadata: namespace: postgres-cluster type: Opaque stringData: - ACCESS_KEY_ID: ENC[AES256_GCM,data:bLbsDOvsJToq9IO7XcAbccAzVzM=,iv:AMnPAsaauVgGNG3rKBcatSYq4VhX+/gHdAAamjbFTf8=,tag:wXrQ5LL+Iq1TPmA0Cz2WeQ==,type:str] - ACCESS_SECRET_KEY: ENC[AES256_GCM,data:EkdT4N1nmLcVIOzMrLNLrQxsm3Hl3eX/4NBUD8E+VwuEKzq4qgptdQ==,iv:UCEmrnHqBvya6tqsJXeuYBES/z06uCTtSS6A6iMoqzY=,tag:vI0+uJoaqeqeuh0OZzQyzA==,type:str] + ACCESS_KEY_ID: ENC[AES256_GCM,data:W13oyVrTheW26acU7Tw9wACEkAw=,iv:oUt6OHFzR4fbQbMNZJ+t0wHn+nlXP/L3uEWmaZ/qjOU=,tag:ZXRSTz3bJT2jVlKJrSc2rg==,type:str] + ACCESS_SECRET_KEY: ENC[AES256_GCM,data:Tm0Qe6LWikNyp9/oE65rg6ZB+/hdv78OM1pByDH49PeuzszgjgVdhA==,iv:grk5zZQTlxm/67nFLX3FVjjV4urNCpndUNvrhnT+W+k=,tag:sD5eW8vyHX2WuXli22Splw==,type:str] sops: kms: [] gcp_kms: [] @@ -41,14 +41,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOXlBaDFkbWY4b2dxRzN1 - SkZNaFByTmlrbllrb2JYZXJmSmp0eThYdlNZCkpkSG40ZG11L0lab2RGa2UvL1BV - cmxGVkFDTGhWby9DUzV1dEFxZTFKQjAKLS0tIDNlQ3lyT05LRW1QbE5DNzJSOUdy - clBZVkFHcjFLemdFd1p1M0ttTmsxLzgKczm43BeWp2u9p9WJ2ncGMFvI/0HyJo/e - 9YeeQIAv4EQHNyikvxLvpOuTXOnkqhO5yQzU5ghelJ8f03PiQMHZpg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKaEE3UmpFaFYycTdIeDdl + NlRXZ2ljWkJ5UDNxUm1wTGU3c0RNNUxnRGhJCkdDV1krTndVVUQ3Nm9QYUlPRGR4 + b1liY0czZ3FGdVpFSUVoQUlzcCtJUXcKLS0tIEYxL3RFZ0RFY2ZVdnBhVGJ2SEs4 + U1RHUmNHMEw1MUlvNjVybUY0V056K2sKbVD14Znhs9PBMyGdNXhSxPyPb8G+st6y + RMKT7TfGb5wmXxKF1QqpxlJzh2HDLle3o8ijCOOxPjQsfVzuiC1/6Q== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-04T10:27:39Z" - mac: ENC[AES256_GCM,data:UuVjYm6og6B/YiOvgL2dlvX9oSOY9xpfU73ypSfpnIwVQokr5Xj04vjNTok37ozKXsgwne3FSgBC7qe+A84ZSHHLhlXcCcH2PSMrGeOymo6Kcnw+VJ0NoTKAFl4Uu8k+oZMUsMQ+IhlymvrYdoUMDuXWc7B0OrXc5qhf0jyjfys=,iv:9TwvINSW6van1A8hAnpEW1CXAiGXibhY1hEldY4BcVc=,tag:DQ3vbhWZWUIjmRhfOQF09Q==,type:str] + lastmodified: "2025-04-04T13:22:20Z" + mac: ENC[AES256_GCM,data:n9Wga18lDe/bf3bt++o+YLJw3nhLHBpaTuMq9Lan0sSYlVdXLs2nGe7IphOy/U+FV21MnS1/J/7uq7IloI2R771J8DjkBQ1l7OQsCVA8pJ71bI3mT4UWXGkQGMaF9C9A5zjyDYbAtjI7mdxAeWa0Ho/lwd1sv8SLXxqGUYgHAtM=,iv:E5+SKY0+0IdxI0cjpebDlSqBDlk7BlppGe/jf7fI8PA=,tag:/IAZO9fQCaid5N/J4wqpAg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -72,23 +72,23 @@ spec: pg_hba: - host all bugzilla all md5 backup: - retentionPolicy: "30d" + retentionPolicy: 30d barmanObjectStore: destinationPath: s3://midnightthoughts-pg-backup/pg-base-backup endpointURL: https://hel1.your-objectstorage.com s3Credentials: accessKeyId: name: pg-s3-credentials - key: ENC[AES256_GCM,data:YaA/sgnc3wSrfcHH0g==,iv:FH7zflMXfdXOEvEOFEHQyNUt5oFLwbTve8MptHy8GhQ=,tag:nVtLJJcdh0Hl4IFFOMbVmQ==,type:str] + key: ENC[AES256_GCM,data:E/QSaqAn3fbbWrNgHg==,iv:wchm0eWH+MiZ/y8jqORmo2WhbFkjoTX3/GAz2Q+DBxs=,tag:kMgvbbsZ4mjgGSDowQRlog==,type:str] secretAccessKey: name: pg-s3-credentials - key: ENC[AES256_GCM,data:kQWZ8rqpLSXsKnoN+wcJ4Ao=,iv:gX+jJnH8he08liC3bWqWFexfQ0h71EchNrLtUTdQ5bs=,tag:gRDhTPc8dU6K92rgjW+x9Q==,type:str] + key: ENC[AES256_GCM,data:QpSBwXmpbP12V1H3HEY3NRs=,iv:0nUj10DmpT5/35ZUffZmCaYtM8rcOuZdEeES3ozWI0I=,tag:u/+UVycQyLlpx73bhaPR6A==,type:str] wal: compression: gzip maxParallel: 8 data: - compression: ENC[AES256_GCM,data:JL/2ew==,iv:Ae948RFRQx4n+OhMd8KBflDuSEqrUXvi99h+FgoM2VQ=,tag:G8ZP6lkUYrN1STxfYymGyw==,type:str] - immediateCheckpoint: ENC[AES256_GCM,data:F2UdqA==,iv:xsMccqWk2j5gIGUUIARR1+aASLbLlOG2pOXTRRmIe3g=,tag:+NgXfNk1CneokJ/jwsKRKQ==,type:bool] + compression: ENC[AES256_GCM,data:i1jonQ==,iv:9s1RCrg3xMJReU7ObUBb/racS2xzj0VgOP49B1W+fuo=,tag:wF1XLAQpP125B7pzVGfAwg==,type:str] + immediateCheckpoint: ENC[AES256_GCM,data:+r7bqg==,iv:Ky6cZaejtl6XVr23KyCrl51I1q2X5S8wD8fd5SO5JnU=,tag:+tNInl3G61E+Y9uHWeho9g==,type:bool] managed: roles: - name: synapse @@ -241,14 +241,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOXlBaDFkbWY4b2dxRzN1 - SkZNaFByTmlrbllrb2JYZXJmSmp0eThYdlNZCkpkSG40ZG11L0lab2RGa2UvL1BV - cmxGVkFDTGhWby9DUzV1dEFxZTFKQjAKLS0tIDNlQ3lyT05LRW1QbE5DNzJSOUdy - clBZVkFHcjFLemdFd1p1M0ttTmsxLzgKczm43BeWp2u9p9WJ2ncGMFvI/0HyJo/e - 9YeeQIAv4EQHNyikvxLvpOuTXOnkqhO5yQzU5ghelJ8f03PiQMHZpg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKaEE3UmpFaFYycTdIeDdl + NlRXZ2ljWkJ5UDNxUm1wTGU3c0RNNUxnRGhJCkdDV1krTndVVUQ3Nm9QYUlPRGR4 + b1liY0czZ3FGdVpFSUVoQUlzcCtJUXcKLS0tIEYxL3RFZ0RFY2ZVdnBhVGJ2SEs4 + U1RHUmNHMEw1MUlvNjVybUY0V056K2sKbVD14Znhs9PBMyGdNXhSxPyPb8G+st6y + RMKT7TfGb5wmXxKF1QqpxlJzh2HDLle3o8ijCOOxPjQsfVzuiC1/6Q== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-04T10:27:39Z" - mac: ENC[AES256_GCM,data:UuVjYm6og6B/YiOvgL2dlvX9oSOY9xpfU73ypSfpnIwVQokr5Xj04vjNTok37ozKXsgwne3FSgBC7qe+A84ZSHHLhlXcCcH2PSMrGeOymo6Kcnw+VJ0NoTKAFl4Uu8k+oZMUsMQ+IhlymvrYdoUMDuXWc7B0OrXc5qhf0jyjfys=,iv:9TwvINSW6van1A8hAnpEW1CXAiGXibhY1hEldY4BcVc=,tag:DQ3vbhWZWUIjmRhfOQF09Q==,type:str] + lastmodified: "2025-04-04T13:22:20Z" + mac: ENC[AES256_GCM,data:n9Wga18lDe/bf3bt++o+YLJw3nhLHBpaTuMq9Lan0sSYlVdXLs2nGe7IphOy/U+FV21MnS1/J/7uq7IloI2R771J8DjkBQ1l7OQsCVA8pJ71bI3mT4UWXGkQGMaF9C9A5zjyDYbAtjI7mdxAeWa0Ho/lwd1sv8SLXxqGUYgHAtM=,iv:E5+SKY0+0IdxI0cjpebDlSqBDlk7BlppGe/jf7fI8PA=,tag:/IAZO9fQCaid5N/J4wqpAg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -273,14 +273,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOXlBaDFkbWY4b2dxRzN1 - SkZNaFByTmlrbllrb2JYZXJmSmp0eThYdlNZCkpkSG40ZG11L0lab2RGa2UvL1BV - cmxGVkFDTGhWby9DUzV1dEFxZTFKQjAKLS0tIDNlQ3lyT05LRW1QbE5DNzJSOUdy - clBZVkFHcjFLemdFd1p1M0ttTmsxLzgKczm43BeWp2u9p9WJ2ncGMFvI/0HyJo/e - 9YeeQIAv4EQHNyikvxLvpOuTXOnkqhO5yQzU5ghelJ8f03PiQMHZpg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKaEE3UmpFaFYycTdIeDdl + NlRXZ2ljWkJ5UDNxUm1wTGU3c0RNNUxnRGhJCkdDV1krTndVVUQ3Nm9QYUlPRGR4 + b1liY0czZ3FGdVpFSUVoQUlzcCtJUXcKLS0tIEYxL3RFZ0RFY2ZVdnBhVGJ2SEs4 + U1RHUmNHMEw1MUlvNjVybUY0V056K2sKbVD14Znhs9PBMyGdNXhSxPyPb8G+st6y + RMKT7TfGb5wmXxKF1QqpxlJzh2HDLle3o8ijCOOxPjQsfVzuiC1/6Q== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-04T10:27:39Z" - mac: ENC[AES256_GCM,data:UuVjYm6og6B/YiOvgL2dlvX9oSOY9xpfU73ypSfpnIwVQokr5Xj04vjNTok37ozKXsgwne3FSgBC7qe+A84ZSHHLhlXcCcH2PSMrGeOymo6Kcnw+VJ0NoTKAFl4Uu8k+oZMUsMQ+IhlymvrYdoUMDuXWc7B0OrXc5qhf0jyjfys=,iv:9TwvINSW6van1A8hAnpEW1CXAiGXibhY1hEldY4BcVc=,tag:DQ3vbhWZWUIjmRhfOQF09Q==,type:str] + lastmodified: "2025-04-04T13:22:20Z" + mac: ENC[AES256_GCM,data:n9Wga18lDe/bf3bt++o+YLJw3nhLHBpaTuMq9Lan0sSYlVdXLs2nGe7IphOy/U+FV21MnS1/J/7uq7IloI2R771J8DjkBQ1l7OQsCVA8pJ71bI3mT4UWXGkQGMaF9C9A5zjyDYbAtjI7mdxAeWa0Ho/lwd1sv8SLXxqGUYgHAtM=,iv:E5+SKY0+0IdxI0cjpebDlSqBDlk7BlppGe/jf7fI8PA=,tag:/IAZO9fQCaid5N/J4wqpAg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -306,14 +306,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOXlBaDFkbWY4b2dxRzN1 - SkZNaFByTmlrbllrb2JYZXJmSmp0eThYdlNZCkpkSG40ZG11L0lab2RGa2UvL1BV - cmxGVkFDTGhWby9DUzV1dEFxZTFKQjAKLS0tIDNlQ3lyT05LRW1QbE5DNzJSOUdy - clBZVkFHcjFLemdFd1p1M0ttTmsxLzgKczm43BeWp2u9p9WJ2ncGMFvI/0HyJo/e - 9YeeQIAv4EQHNyikvxLvpOuTXOnkqhO5yQzU5ghelJ8f03PiQMHZpg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKaEE3UmpFaFYycTdIeDdl + NlRXZ2ljWkJ5UDNxUm1wTGU3c0RNNUxnRGhJCkdDV1krTndVVUQ3Nm9QYUlPRGR4 + b1liY0czZ3FGdVpFSUVoQUlzcCtJUXcKLS0tIEYxL3RFZ0RFY2ZVdnBhVGJ2SEs4 + U1RHUmNHMEw1MUlvNjVybUY0V056K2sKbVD14Znhs9PBMyGdNXhSxPyPb8G+st6y + RMKT7TfGb5wmXxKF1QqpxlJzh2HDLle3o8ijCOOxPjQsfVzuiC1/6Q== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-04T10:27:39Z" - mac: ENC[AES256_GCM,data:UuVjYm6og6B/YiOvgL2dlvX9oSOY9xpfU73ypSfpnIwVQokr5Xj04vjNTok37ozKXsgwne3FSgBC7qe+A84ZSHHLhlXcCcH2PSMrGeOymo6Kcnw+VJ0NoTKAFl4Uu8k+oZMUsMQ+IhlymvrYdoUMDuXWc7B0OrXc5qhf0jyjfys=,iv:9TwvINSW6van1A8hAnpEW1CXAiGXibhY1hEldY4BcVc=,tag:DQ3vbhWZWUIjmRhfOQF09Q==,type:str] + lastmodified: "2025-04-04T13:22:20Z" + mac: ENC[AES256_GCM,data:n9Wga18lDe/bf3bt++o+YLJw3nhLHBpaTuMq9Lan0sSYlVdXLs2nGe7IphOy/U+FV21MnS1/J/7uq7IloI2R771J8DjkBQ1l7OQsCVA8pJ71bI3mT4UWXGkQGMaF9C9A5zjyDYbAtjI7mdxAeWa0Ho/lwd1sv8SLXxqGUYgHAtM=,iv:E5+SKY0+0IdxI0cjpebDlSqBDlk7BlppGe/jf7fI8PA=,tag:/IAZO9fQCaid5N/J4wqpAg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -337,14 +337,45 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOXlBaDFkbWY4b2dxRzN1 - SkZNaFByTmlrbllrb2JYZXJmSmp0eThYdlNZCkpkSG40ZG11L0lab2RGa2UvL1BV - cmxGVkFDTGhWby9DUzV1dEFxZTFKQjAKLS0tIDNlQ3lyT05LRW1QbE5DNzJSOUdy - clBZVkFHcjFLemdFd1p1M0ttTmsxLzgKczm43BeWp2u9p9WJ2ncGMFvI/0HyJo/e - 9YeeQIAv4EQHNyikvxLvpOuTXOnkqhO5yQzU5ghelJ8f03PiQMHZpg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKaEE3UmpFaFYycTdIeDdl + NlRXZ2ljWkJ5UDNxUm1wTGU3c0RNNUxnRGhJCkdDV1krTndVVUQ3Nm9QYUlPRGR4 + b1liY0czZ3FGdVpFSUVoQUlzcCtJUXcKLS0tIEYxL3RFZ0RFY2ZVdnBhVGJ2SEs4 + U1RHUmNHMEw1MUlvNjVybUY0V056K2sKbVD14Znhs9PBMyGdNXhSxPyPb8G+st6y + RMKT7TfGb5wmXxKF1QqpxlJzh2HDLle3o8ijCOOxPjQsfVzuiC1/6Q== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-04T10:27:39Z" - mac: ENC[AES256_GCM,data:UuVjYm6og6B/YiOvgL2dlvX9oSOY9xpfU73ypSfpnIwVQokr5Xj04vjNTok37ozKXsgwne3FSgBC7qe+A84ZSHHLhlXcCcH2PSMrGeOymo6Kcnw+VJ0NoTKAFl4Uu8k+oZMUsMQ+IhlymvrYdoUMDuXWc7B0OrXc5qhf0jyjfys=,iv:9TwvINSW6van1A8hAnpEW1CXAiGXibhY1hEldY4BcVc=,tag:DQ3vbhWZWUIjmRhfOQF09Q==,type:str] + lastmodified: "2025-04-04T13:22:20Z" + mac: ENC[AES256_GCM,data:n9Wga18lDe/bf3bt++o+YLJw3nhLHBpaTuMq9Lan0sSYlVdXLs2nGe7IphOy/U+FV21MnS1/J/7uq7IloI2R771J8DjkBQ1l7OQsCVA8pJ71bI3mT4UWXGkQGMaF9C9A5zjyDYbAtjI7mdxAeWa0Ho/lwd1sv8SLXxqGUYgHAtM=,iv:E5+SKY0+0IdxI0cjpebDlSqBDlk7BlppGe/jf7fI8PA=,tag:/IAZO9fQCaid5N/J4wqpAg==,type:str] + pgp: [] + encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ + version: 3.9.1 +--- +apiVersion: postgresql.cnpg.io/v1 +kind: Database +metadata: + name: plane + namespace: postgres-cluster +spec: + name: plane + owner: plane + cluster: + name: pg-cluster-v2 +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKaEE3UmpFaFYycTdIeDdl + NlRXZ2ljWkJ5UDNxUm1wTGU3c0RNNUxnRGhJCkdDV1krTndVVUQ3Nm9QYUlPRGR4 + b1liY0czZ3FGdVpFSUVoQUlzcCtJUXcKLS0tIEYxL3RFZ0RFY2ZVdnBhVGJ2SEs4 + U1RHUmNHMEw1MUlvNjVybUY0V056K2sKbVD14Znhs9PBMyGdNXhSxPyPb8G+st6y + RMKT7TfGb5wmXxKF1QqpxlJzh2HDLle3o8ijCOOxPjQsfVzuiC1/6Q== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2025-04-04T13:22:20Z" + mac: ENC[AES256_GCM,data:n9Wga18lDe/bf3bt++o+YLJw3nhLHBpaTuMq9Lan0sSYlVdXLs2nGe7IphOy/U+FV21MnS1/J/7uq7IloI2R771J8DjkBQ1l7OQsCVA8pJ71bI3mT4UWXGkQGMaF9C9A5zjyDYbAtjI7mdxAeWa0Ho/lwd1sv8SLXxqGUYgHAtM=,iv:E5+SKY0+0IdxI0cjpebDlSqBDlk7BlppGe/jf7fI8PA=,tag:/IAZO9fQCaid5N/J4wqpAg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1