cluster

commit 422d455f196764d5e2fa9d3171d2a61f81639c3e
parent 0935990fe79fb37129eeec2547b063f37bf45c7d
Author: MTRNord <mtrnord1@gmail.com>
Date:   Wed, 19 Feb 2025 12:00:13 +0100

Migrate capacitor to HTTPRoute

Diffstat:
M
infrastructure/controllers/capacitor.yaml
 | 
100
++++++++++++++++++++++++++++++++++++++++---------------------------------------

1 file changed, 51 insertions(+), 49 deletions(-)
diff --git a/infrastructure/controllers/capacitor.yaml b/infrastructure/controllers/capacitor.yaml
@@ -7,7 +7,7 @@ spec:
     interval: 12h
     url: oci://ghcr.io/gimlet-io/capacitor-manifests
     ref:
-        semver: '>=0.4.2'
+        semver: ">=0.4.2"
 sops:
     kms: []
     gcp_kms: []
@@ -16,13 +16,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
-            UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
-            aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
-            Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
-            FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
+              UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
+              aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
+              Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
+              FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-02-19T10:48:23Z"
     mac: ENC[AES256_GCM,data:8YH3YEU1rQ8JIwGDPSgxDQNUZfgiUJeTgjLBWoaMzGTLfTBU1YFz0L8kBgIju4u5nIncROIK1kGxuTZSHMohnoGAmtQzDslXefnMh8a9IKvtkVSkcg1FY7M9edV28xMdFIx5QH9XI8db827lroLkfjWCiWzzWgKf/PbqlCiEpsU=,iv:Ms430aZThq79GgvyONkQu+B7n1aKu1sYQ/wmgNur7wU=,tag:xvthdFK6nQaLBbzy/Tki3A==,type:str]
     pgp: []
@@ -53,13 +53,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
-            UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
-            aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
-            Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
-            FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
+              UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
+              aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
+              Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
+              FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-02-19T10:48:23Z"
     mac: ENC[AES256_GCM,data:8YH3YEU1rQ8JIwGDPSgxDQNUZfgiUJeTgjLBWoaMzGTLfTBU1YFz0L8kBgIju4u5nIncROIK1kGxuTZSHMohnoGAmtQzDslXefnMh8a9IKvtkVSkcg1FY7M9edV28xMdFIx5QH9XI8db827lroLkfjWCiWzzWgKf/PbqlCiEpsU=,iv:Ms430aZThq79GgvyONkQu+B7n1aKu1sYQ/wmgNur7wU=,tag:xvthdFK6nQaLBbzy/Tki3A==,type:str]
     pgp: []
@@ -82,13 +82,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
-            UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
-            aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
-            Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
-            FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
+              UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
+              aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
+              Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
+              FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-02-19T10:48:23Z"
     mac: ENC[AES256_GCM,data:8YH3YEU1rQ8JIwGDPSgxDQNUZfgiUJeTgjLBWoaMzGTLfTBU1YFz0L8kBgIju4u5nIncROIK1kGxuTZSHMohnoGAmtQzDslXefnMh8a9IKvtkVSkcg1FY7M9edV28xMdFIx5QH9XI8db827lroLkfjWCiWzzWgKf/PbqlCiEpsU=,iv:Ms430aZThq79GgvyONkQu+B7n1aKu1sYQ/wmgNur7wU=,tag:xvthdFK6nQaLBbzy/Tki3A==,type:str]
     pgp: []
@@ -108,11 +108,11 @@ spec:
         - ui.k8s.midnightthoughts.space
     rules:
         - backendRefs:
-            - name: capacitor
-              port: 9000
+              - name: capacitor
+                port: 9000
           timeouts:
-            request: 240s
-            backendRequest: 0s
+              request: 240s
+              backendRequest: 0s
 sops:
     kms: []
     gcp_kms: []
@@ -121,13 +121,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
-            UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
-            aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
-            Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
-            FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
+              UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
+              aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
+              Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
+              FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-02-19T10:48:23Z"
     mac: ENC[AES256_GCM,data:8YH3YEU1rQ8JIwGDPSgxDQNUZfgiUJeTgjLBWoaMzGTLfTBU1YFz0L8kBgIju4u5nIncROIK1kGxuTZSHMohnoGAmtQzDslXefnMh8a9IKvtkVSkcg1FY7M9edV28xMdFIx5QH9XI8db827lroLkfjWCiWzzWgKf/PbqlCiEpsU=,iv:Ms430aZThq79GgvyONkQu+B7n1aKu1sYQ/wmgNur7wU=,tag:xvthdFK6nQaLBbzy/Tki3A==,type:str]
     pgp: []
@@ -147,6 +147,8 @@ spec:
     oidc:
         provider:
             issuer: https://auth.midnightthoughts.space/application/o/capacitor/
+            authorizationEndpoint: https://auth.midnightthoughts.space/application/o/authorize/
+            tokenEndpoint: https://auth.midnightthoughts.space/application/o/token/
         clientID: LKNnKYcm816EEnnFTmEdfo91kmWyJnc3lrh98NWW
         #gitleaks:allow
         clientSecret:
@@ -161,13 +163,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
-            UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
-            aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
-            Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
-            FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
+              UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
+              aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
+              Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
+              FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-02-19T10:48:23Z"
     mac: ENC[AES256_GCM,data:8YH3YEU1rQ8JIwGDPSgxDQNUZfgiUJeTgjLBWoaMzGTLfTBU1YFz0L8kBgIju4u5nIncROIK1kGxuTZSHMohnoGAmtQzDslXefnMh8a9IKvtkVSkcg1FY7M9edV28xMdFIx5QH9XI8db827lroLkfjWCiWzzWgKf/PbqlCiEpsU=,iv:Ms430aZThq79GgvyONkQu+B7n1aKu1sYQ/wmgNur7wU=,tag:xvthdFK6nQaLBbzy/Tki3A==,type:str]
     pgp: []
@@ -185,8 +187,8 @@ spec:
             app.kubernetes.io/instance: capacitor
     ingress:
         - ports:
-            - protocol: TCP
-              port: 9000
+              - protocol: TCP
+                port: 9000
     policyTypes:
         - Ingress
 sops:
@@ -197,13 +199,13 @@ sops:
     age:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
-            UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
-            aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
-            Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
-            FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
-            -----END AGE ENCRYPTED FILE-----
+              -----BEGIN AGE ENCRYPTED FILE-----
+              YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
+              UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
+              aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
+              Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
+              FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
+              -----END AGE ENCRYPTED FILE-----
     lastmodified: "2025-02-19T10:48:23Z"
     mac: ENC[AES256_GCM,data:8YH3YEU1rQ8JIwGDPSgxDQNUZfgiUJeTgjLBWoaMzGTLfTBU1YFz0L8kBgIju4u5nIncROIK1kGxuTZSHMohnoGAmtQzDslXefnMh8a9IKvtkVSkcg1FY7M9edV28xMdFIx5QH9XI8db827lroLkfjWCiWzzWgKf/PbqlCiEpsU=,iv:Ms430aZThq79GgvyONkQu+B7n1aKu1sYQ/wmgNur7wU=,tag:xvthdFK6nQaLBbzy/Tki3A==,type:str]
     pgp: []