commit 1e17316b79fbd0852b82f0cb6ea2fa39008a5040
parent d70cd2f74b0e4c78ba92eb6137471513744367a7
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Fri, 3 Apr 2026 16:31:47 +0200
update cosign
Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>
Diffstat:
3 files changed, 13 insertions(+), 13 deletions(-)
diff --git a/apps/talos_cluster/image-builder/cosign-secret.yaml b/apps/talos_cluster/image-builder/cosign-secret.yaml
@@ -8,8 +8,8 @@ metadata:
name: image-builder-cosign-secret
namespace: image-builder
stringData:
- cosign.key: ENC[AES256_GCM,data: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,iv:sohppSbU/94g+xbwa+YYeJ37q729PAM4KpOxjLyMvJc=,tag:OMAekiulz4hvHesl1AsDdQ==,type:str]
- cosign.password: ""
+ cosign.key: ENC[AES256_GCM,data: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,iv:qpsioAEH7IGBMoWWtMFh/Wneaw0GUEF3TLM8oXThDQc=,tag:r9fx8qzSfomQhyV86CV4IA==,type:str]
+ cosign.password: ENC[AES256_GCM,data:dgTshbPNKflUT02XXhIwzUF38mUCbTcvObqu4PBwA9Wc+wja/jeXCzun,iv:5jH3fTYhoFYQU9V8F044T04vsuTDX6F6WNR5xkcPYWo=,tag:YCmzB4NKeUJF+54VLCt3rg==,type:str]
sops:
kms: []
gcp_kms: []
@@ -19,14 +19,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmM09JRVVZejlYc0ZsMGxF
- R1N6K0puVS9DWGo0UjVab0RNQTBPczhaRGgwCk9xRnI1SktnOEVvMngzZWsyYzVE
- S0ZmTE5rUi9sTlVGekxCWXVvNjdHSUEKLS0tIHF1K09PaFJZTGd6eVZGSE5sdGw1
- SkVKaVVCMVQzdWJJaXQ2Njl6Uml3TncK7ciZetJlpwXkfiSoyLKKCFjVueSvoCDC
- HdHafJcfzmwGM5iYtKhVL/tbbgcxAW0UhjUXkhoKvzSn4UXhmwDLKw==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBValVFOUtWMGc4c3RuV1Y0
+ cFhpRUY3MlhlM2wvb1p0SHlXc1YxVnlNRTFzCjhzSEtCRXJ6aEdvM3ZsVVEvWFlR
+ cGxDaWE4RG9IOVFxU1pEREowMk1OeG8KLS0tIEZNcWhJYU5JMFlhc1k0a3c1Q3FV
+ SS9XTnRobGwwS0JaTkIvTUZ1ZnEyQXMKXmF+q+AC4hO+2LDZn9u6PBkAeGPK67uI
+ 3vDmtzjJQpcpwqTEJF6wWuWJ1L1IwXyCUDJe37yH7StHiQDkM7U3Lg==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2026-03-29T14:03:35Z"
- mac: ENC[AES256_GCM,data:Bk51kDWLEh1qvkmB/YZefO2tD20S9MmaE3kjDIrta8ueP4dFZH2ZGI6dcpRbOwr0Se2KPuIgq9IfrxEaAQ02G6vt5+3y7GnVTnZvYiy5cU9NPsbD+u9YgW1LQFA0+4i2ZOdFGWOfF5TLjpz3F3w27lC1PZMSggSW2/5TAyZqmaQ=,iv:UcwJ5qXiOE1Qu6yHYZaZr/iO5WUozXmYATC2gdTRnAk=,tag:OL6S0LNzqOh92x572r47Ag==,type:str]
+ lastmodified: "2026-04-03T14:30:19Z"
+ mac: ENC[AES256_GCM,data:nXHEKbokj5TZ8X4RIEAlZ+bP7EB8ky5tugQOwlm78zFOUUbwwyJWmkn5/ZuHqqletWW7qFO2oadfAPfhiKFtQEFFrn7r5TNY0sdhSPJ06BUY7n/vfb8Wc/iZJdVjS1vsLdlDzMxIga8SyDMyGUxDgc1ao2cOMKzh3j3MwwSfTSw=,iv:yGFxliqf0vLWT4X9L8GxmCE/+1eL/ywmtfBH7UMSAD0=,tag:wZvJNZXDq4hbJ7Td4kvOfQ==,type:str]
pgp: []
encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|smtp_auth_password|addresses|smtp_auth_username|authorization_credentials|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
version: 3.9.1
diff --git a/cosign.pub b/cosign.pub
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
-MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEOpUp7l1T+CPFS3BhcBv9DQXNXJtK
-p87SB7ZXZL5FactrIJ9Ezx1dhIWEB5YJmrXHowKksl1I7iwGpb13rFnGNQ==
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEw9fvLAgkWk7gjyqL7zFwsaVjio27
+ZN0AmKDg6Xn/hIfuvQRCZSlsobHpbxddDuoSEfQsDU0DEeFD7TxV2BsmpA==
-----END PUBLIC KEY-----
diff --git a/infrastructure_talos/controllers/zot/configmap.yaml b/infrastructure_talos/controllers/zot/configmap.yaml
@@ -6,6 +6,6 @@ metadata:
data:
cosign.pub: |
-----BEGIN PUBLIC KEY-----
- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEOpUp7l1T+CPFS3BhcBv9DQXNXJtK
- p87SB7ZXZL5FactrIJ9Ezx1dhIWEB5YJmrXHowKksl1I7iwGpb13rFnGNQ==
+ MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEw9fvLAgkWk7gjyqL7zFwsaVjio27
+ ZN0AmKDg6Xn/hIfuvQRCZSlsobHpbxddDuoSEfQsDU0DEeFD7TxV2BsmpA==
-----END PUBLIC KEY-----
