cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 4fc8a2ae3d80493064a59776542dd85f116199f3
parent bc30e675537b50e0db1e65d9696f1da9e1690f69
Author: MTRNord <mtrnord1@gmail.com>
Date:   Mon, 31 Mar 2025 16:29:51 +0200

Prepare moving bugzilla to mariadb

Diffstat:
Mapps/2024_cluster/secrets/bugzilla.yaml | 21+++++++++++----------
Mapps/base/bugzilla/deployment.yaml | 122+++++++++++++++++++++++++++++++++++++++++++------------------------------------
Mapps/base/mariadb-operator/mariadb.yaml | 2+-
3 files changed, 78 insertions(+), 67 deletions(-)

diff --git a/apps/2024_cluster/secrets/bugzilla.yaml b/apps/2024_cluster/secrets/bugzilla.yaml @@ -5,9 +5,10 @@ metadata: namespace: bugzilla type: Opaque stringData: - password: ENC[AES256_GCM,data:H7iWKOZmIm0flAn4xmBuA0sKdWQkaMLZOZ4C9+YjFMUCxL3Huvw0kMR4/nIgHPKAIE0VwWyPd+xUM7PBNJQgwQ==,iv:nkbhEZzL6x7JFURymcjdydbKHy0LnYYYfYhfuFZutcI=,tag:ftu7J98BLfH7478zlrPTgg==,type:str] - db_password: ENC[AES256_GCM,data:MTSfaE0L8Xt+pG2p2aa+iyBrQvXXKXYXEWjxKc8OF60WbBYv1gtnyOckZZ9lqGDGctTQGg1IpSQnpfcvWvsXFg==,iv:WpEti4zvgWH/i7kV3njDDYXiv5xrB/gHxrcLvVhXLD8=,tag:MR83fwX40dyhdihOhRTiLg==,type:str] - site_wide_secret: ENC[AES256_GCM,data:37XaTLD0u7JhtXUefanNXGsFc+TNvliRk3jqvHjGT6++lpg+GIh+QOoOaa+Qg3vIFzh/64lbzroT9yCxhijfkw==,iv:RuK2Cg4FZlFjdqx4hDD1fw0MxNgAroFiCjVZjHEOEqc=,tag:omypbLwiXmHwWtaqNTSyeQ==,type:str] + password: ENC[AES256_GCM,data:SldnPKumawVaZ9V7AVFaFgwz9Q9R9kOYoxjZRVU/9ST0EvbjNCquz2Z1Ov/u8fVN/NE1j5bVWYSk4fVg34ACgQ==,iv:PVU4ggJqtLvKrTBHzwKW48wRU5p1X4cCQ6Qccrep21Y=,tag:0yhxzy6MDNVZczhAJqUV6w==,type:str] + db_password: ENC[AES256_GCM,data:8R3tBnZ2OVhmiQF7e4GBbJilD6rlzh71bW6bFL27DDBrFRJcHL1mVgUXCGGNI8T+KpTQ5S7VMLbfrh/jhFuYuQ==,iv:4gvXmPyF4PlGqeu5MpCDKuh4uH7EyeH3U6zUFxy1tzg=,tag:pczq/87vE3dCbsMgAcGUDQ==,type:str] + site_wide_secret: ENC[AES256_GCM,data:lbxIkBg2Qm5tqnQ+WB9ouM+Dfb1EI67abVcC11DGmQoZG4DVjtAXK1XTHRIzwUE/xWNgHLx/qhf/K5nj6AkwqA==,iv:2frtaYzbhJ6XCiHIY5ShmeqMb87sKCwQewTDcQ3bfcU=,tag:t1IIF5FA8HBwdmDuetH1mQ==,type:str] + jwt_secret: ENC[AES256_GCM,data:HXGqH38HBxHX2hTRUQXum5CLIQpTasQnkvrkffCFpQvbcYgbYHP1HXQDIL+Q3eD/FvGSArd4T129QmAFtgDDrQ==,iv:mhInw1ZWExDA3BZrgm0yyJSD5uiYIEicx5YbVCRWKWo=,tag:efLgzK4JzPF+tw3OCCbgXg==,type:str] sops: kms: [] gcp_kms: [] @@ -17,14 +18,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnMXBxQWI5aStZcDNWYmEz - M2ZMU0ZpbVNaWUpuVXRrVXUzYVNabDdNYTBzCnZPTW01dW1VcUhMMllaamRpdmtF - Yi9hRjJ0NGlRWkpTcnRBYUhoN1hhK1UKLS0tIDFpWDZmb2xNNU9MZmZLQk5UVmY5 - Z3pJbGtXSmY3NTg5NHJhTHIzR3ZXVzAK/xJlRjRk/Jf+Wqhagnf+uQ3mFTmzggoU - a7XuQlkIk/Yi2YJ14+2zwqyIOZjQspHqYagbMTexTNQw9rlvk2mY6w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4K0dDeEhFTUFLV1hCRXk1 + cHh0OUpsd1lud0RxbU9pcUpYeEgvdFVDR1dzCnRUcncxaTJwNzFPY0ZSY1hYS3NG + Z0JqYUswYk1nLytUZFZVaGZkK3NLTk0KLS0tIEQzVXFCUlpDakpjKzd2eGtnUllm + WFp6T2o4SklxaVJtTDd0SXVFR1BFY0kKOshQx2fnquHxrb8oIzvu2VGOrSk61w7V + 7tcZgRia0lgaJ3deL87uhxyINrIBIvEZ8mISvXxGbkl9bTguNkkGQA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-03-31T14:07:13Z" - mac: ENC[AES256_GCM,data:KngZbPAV+fTnUxPDw5fqr7QYGhIf6wRflqjrLJfASgkG/lHNPr7hF+FPeprsp92askSi2buR52Z8Pt1QSvxgRZg3yrVzZvbnzso5dmWKt2pu4SFKhy824xp620emunFn/Yn4K8pvoSAih0HUD7U0z3xqlFUFl69urEpRMrcQTmk=,iv:rTLhB/jsD7I7TvagvBQKKhaUjYiry2sMFVcbQeIZgaE=,tag:o4fgvxUBKDd+fjmaT9FZDw==,type:str] + lastmodified: "2025-03-31T14:12:13Z" + mac: ENC[AES256_GCM,data:VlMI8/2XE1pxmlKCQGA8DPJtx0SNrj+W4FV4YaSzpfzxAV5P96NtwrGzNlabbboLRcuRQeqskj38FcflZchVX0LY5hOk7aNRPACILBBAq9bnhNNV7VzMhvIimitcC52psp9AAMvaf0zqN1iuzZHI7zud7+42fnt/mPOZVVv9jok=,iv:ADhAlmLivtq0WkPQV19Z5J8Fg3rDCrVsQ34az2gEt4U=,tag:t3XIbO8xVXfsWPp3QFjyIw==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 diff --git a/apps/base/bugzilla/deployment.yaml b/apps/base/bugzilla/deployment.yaml @@ -39,19 +39,26 @@ spec: runAsUser: 10001 runAsGroup: 10001 fsGroup: 10001 - #args: - # - while true; do sleep 30; done; - #command: - # - /bin/bash - # - -c - # - -- + resources: + limits: + cpu: 100m + memory: 512Mi + requests: + cpu: 100m + memory: 512Mi + args: + - while true; do sleep 30; done; + command: + - /bin/bash + - -c + - -- env: - name: BMO_urlbase value: https://bugzilla.midnightthoughts.space/ - name: BMO_db_driver - value: sqlite + value: mysql - name: BMO_db_host - value: localhost + value: mariadb-maxscale.mariadb-operator.svc.cluster.local - name: BMO_db_user value: bugzilla - name: BMO_db_pass @@ -61,28 +68,31 @@ spec: #- name: MOJO_REVERSE_PROXY # value: "1" # value: pg - #- name: BMO_db_host - # value: pg-cluster-v2-rw.postgres-cluster.svc.cluster.local - name: BMO_db_name value: bugzilla - #- name: BMO_db_user - # value: bugzilla - #- name: BMO_db_pass - # valueFrom: - # secretKeyRef: - # name: bugzilla - # key: ENC[AES256_GCM,data:6rSmmYzXb0g=,iv:CD66d0jaIUQNW4pUHtOtn7nGv/TADkE5hJyqVam3Q7I=,tag:tb0sL3SVZO8A6z0JUhbboQ==,type:str] + - name: BMO_db_pass + valueFrom: + secretKeyRef: + name: bugzilla + key: ENC[AES256_GCM,data:btiBZRM7WpcB/fo=,iv:+DnT6m1VkLR6zovn97uFgsbt6IpX2wYeGsnK6l6wtkg=,tag:6TvBlVoHBVxPq/ImXH+cIA==,type:str] - name: BMO_site_wide_secret valueFrom: secretKeyRef: name: bugzilla - key: ENC[AES256_GCM,data:3aqfjeAQ5ytLYt5Rk7ZuNQ==,iv:GxN0ge9DjaKzikbkGGiWab8zvNEGfhZrU5FC0GO9cNE=,tag:bliPrLDTYS0xEA+3dbLgKw==,type:str] + key: ENC[AES256_GCM,data:U611SuKuZ9qPJADOysIlxw==,iv:4Si5ieeNQDJtS79Y79IfSdYJZ5vnr5LeAkS6UEN8970=,tag:ldtHmaZnkQZ9hDbItOGJZg==,type:str] + - name: BMO_jwt_secret + valueFrom: + secretKeyRef: + name: bugzilla + key: ENC[AES256_GCM,data:7TvEhWnoyJEOIw==,iv:scYQHkuQd2Q/HoqtKy6Lx7m4AmgAFXi0R2Cx3gcScVA=,tag:rq0X4Q+JC5WsdHTtEoMJNQ==,type:str] #- name: BMO_inbound_proxies # value: "*" - name: BMO_memcached_servers - value: bugzilla + value: "" - name: BMO_memcached_namespace value: "" + - name: MOJO_WORKERS + value: "3" ports: - name: http containerPort: 8000 @@ -111,14 +121,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ2RXS08xbi9hR2tLSVM5 - eE5ITWdzMnozS0NMTjVkczNGSnd5UCtQZFdnCi9JZEZpSHAxdGtRLzZpVVhQWWp0 - RGJOczNXVGVmYXdQN2M4V3BiYTRINUkKLS0tIFdXaC9IcDhyU2kxN0xLdlhHNFBl - MGF4bVk5OHRMTE1pZ1MxeXZvaEpvVUkKfXqsjq5cR9Cobw2YjdKJSRDGyEJqpFDF - y9AW29DvZ/oxbW/vgtoiruPZZd0ttQSpovX+wbc5mCH4A949ckqpBA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzd0tKZER5NktFN1N1c0Vy + YS93S05IWGZVZXIyMHJWVUNmTVpxallITUc0CkJxV1BSMi9iNzl1OFhJQXNUTnk2 + bDN1WDNUZVBVYW9SN3k2SVNtQit0dE0KLS0tIENzYnVMdmloaGxEaGZwaUg2a3Ay + MWsxeklWdjRhMVdNamRneWNUa0pTc1EK/PtQwmTY5LjxVdrXtOhY/JqA8YrkS1wl + 4aGQVugee/uyFqKU2GIrw630mTTT39/2/jWeoEk6nJA1c3WJVEaxfQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-03-19T11:05:16Z" - mac: ENC[AES256_GCM,data:pHExX678QDJzYm+I8dyc9T2Kq+DLktVXGAvLWPqjvxRObL90Z/FpkEzb9EFS6dNvnWifrASsUqhDf7uXJU+R7y3KlgOxtSNGGQ+8VJ9nkfxxNaFdRwYXBKq+WqkZ5DfWfIIwdUN/K5eSUXx5Se+4MzokMWUhEdhO+dFSzERYFY4=,iv:7feVIvrTZAWskPPDQ5F6QxfJC+YNZY3R66fmenxnnts=,tag:RUgblvhjMr6NGelMiVyiNw==,type:str] + lastmodified: "2025-03-31T14:12:11Z" + mac: ENC[AES256_GCM,data:rAnFG0KAhgVZ8Tr0bsyOEAK0uxB0beJiH22FSta8iUOVWzRpuipHmY2+gmjimbQu9hcvyPzlPyyY3q5n29ROgcXKAwpoR/LOkBq0aBlweBnKoyiF3U5WkK5RABWEzq0nIlgd5kU4sQU0OO4i0ZD8NnV3IpzGhMhRNMowQq/Fa4U=,iv:O8hl8VGTIEtD4OdhkVPDhLN2V+PAsM+U11Z1lW74flA=,tag:8Bk3Jibf7jJnoY9wegJpPg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -147,14 +157,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ2RXS08xbi9hR2tLSVM5 - eE5ITWdzMnozS0NMTjVkczNGSnd5UCtQZFdnCi9JZEZpSHAxdGtRLzZpVVhQWWp0 - RGJOczNXVGVmYXdQN2M4V3BiYTRINUkKLS0tIFdXaC9IcDhyU2kxN0xLdlhHNFBl - MGF4bVk5OHRMTE1pZ1MxeXZvaEpvVUkKfXqsjq5cR9Cobw2YjdKJSRDGyEJqpFDF - y9AW29DvZ/oxbW/vgtoiruPZZd0ttQSpovX+wbc5mCH4A949ckqpBA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzd0tKZER5NktFN1N1c0Vy + YS93S05IWGZVZXIyMHJWVUNmTVpxallITUc0CkJxV1BSMi9iNzl1OFhJQXNUTnk2 + bDN1WDNUZVBVYW9SN3k2SVNtQit0dE0KLS0tIENzYnVMdmloaGxEaGZwaUg2a3Ay + MWsxeklWdjRhMVdNamRneWNUa0pTc1EK/PtQwmTY5LjxVdrXtOhY/JqA8YrkS1wl + 4aGQVugee/uyFqKU2GIrw630mTTT39/2/jWeoEk6nJA1c3WJVEaxfQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-03-19T11:05:16Z" - mac: ENC[AES256_GCM,data:pHExX678QDJzYm+I8dyc9T2Kq+DLktVXGAvLWPqjvxRObL90Z/FpkEzb9EFS6dNvnWifrASsUqhDf7uXJU+R7y3KlgOxtSNGGQ+8VJ9nkfxxNaFdRwYXBKq+WqkZ5DfWfIIwdUN/K5eSUXx5Se+4MzokMWUhEdhO+dFSzERYFY4=,iv:7feVIvrTZAWskPPDQ5F6QxfJC+YNZY3R66fmenxnnts=,tag:RUgblvhjMr6NGelMiVyiNw==,type:str] + lastmodified: "2025-03-31T14:12:11Z" + mac: ENC[AES256_GCM,data:rAnFG0KAhgVZ8Tr0bsyOEAK0uxB0beJiH22FSta8iUOVWzRpuipHmY2+gmjimbQu9hcvyPzlPyyY3q5n29ROgcXKAwpoR/LOkBq0aBlweBnKoyiF3U5WkK5RABWEzq0nIlgd5kU4sQU0OO4i0ZD8NnV3IpzGhMhRNMowQq/Fa4U=,iv:O8hl8VGTIEtD4OdhkVPDhLN2V+PAsM+U11Z1lW74flA=,tag:8Bk3Jibf7jJnoY9wegJpPg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -178,14 +188,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ2RXS08xbi9hR2tLSVM5 - eE5ITWdzMnozS0NMTjVkczNGSnd5UCtQZFdnCi9JZEZpSHAxdGtRLzZpVVhQWWp0 - RGJOczNXVGVmYXdQN2M4V3BiYTRINUkKLS0tIFdXaC9IcDhyU2kxN0xLdlhHNFBl - MGF4bVk5OHRMTE1pZ1MxeXZvaEpvVUkKfXqsjq5cR9Cobw2YjdKJSRDGyEJqpFDF - y9AW29DvZ/oxbW/vgtoiruPZZd0ttQSpovX+wbc5mCH4A949ckqpBA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzd0tKZER5NktFN1N1c0Vy + YS93S05IWGZVZXIyMHJWVUNmTVpxallITUc0CkJxV1BSMi9iNzl1OFhJQXNUTnk2 + bDN1WDNUZVBVYW9SN3k2SVNtQit0dE0KLS0tIENzYnVMdmloaGxEaGZwaUg2a3Ay + MWsxeklWdjRhMVdNamRneWNUa0pTc1EK/PtQwmTY5LjxVdrXtOhY/JqA8YrkS1wl + 4aGQVugee/uyFqKU2GIrw630mTTT39/2/jWeoEk6nJA1c3WJVEaxfQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-03-19T11:05:16Z" - mac: ENC[AES256_GCM,data:pHExX678QDJzYm+I8dyc9T2Kq+DLktVXGAvLWPqjvxRObL90Z/FpkEzb9EFS6dNvnWifrASsUqhDf7uXJU+R7y3KlgOxtSNGGQ+8VJ9nkfxxNaFdRwYXBKq+WqkZ5DfWfIIwdUN/K5eSUXx5Se+4MzokMWUhEdhO+dFSzERYFY4=,iv:7feVIvrTZAWskPPDQ5F6QxfJC+YNZY3R66fmenxnnts=,tag:RUgblvhjMr6NGelMiVyiNw==,type:str] + lastmodified: "2025-03-31T14:12:11Z" + mac: ENC[AES256_GCM,data:rAnFG0KAhgVZ8Tr0bsyOEAK0uxB0beJiH22FSta8iUOVWzRpuipHmY2+gmjimbQu9hcvyPzlPyyY3q5n29ROgcXKAwpoR/LOkBq0aBlweBnKoyiF3U5WkK5RABWEzq0nIlgd5kU4sQU0OO4i0ZD8NnV3IpzGhMhRNMowQq/Fa4U=,iv:O8hl8VGTIEtD4OdhkVPDhLN2V+PAsM+U11Z1lW74flA=,tag:8Bk3Jibf7jJnoY9wegJpPg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -196,8 +206,8 @@ metadata: name: bugzilla type: Opaque stringData: - password: ENC[AES256_GCM,data:lbBrG5+z66XvO7vzlutk7nv8bfhTneSAUokIQglNRhnuyjiE8Rdao+CnH8J6dWbW7uEbKa5fvC+Q2PFzdoGvMw==,iv:LJCekt+znJH8OkS6876BcvvFH3F5NtSaZSsilbR6rls=,tag:oP0MIS8nL3/qIlOP6gPszA==,type:str] - site_wide_secret: ENC[AES256_GCM,data:2Owfp+QiTio7IgdR0GSO18lImHKeZuMqUa/ove4yeHP4d3EF9R9zWN9BykLi2BwqpXnPVuzBiRx0ZHEjmQyfIw==,iv:J5RC3PtYJcmpxmCMIy83Z7VrpEk8SbeAPSaDO/dYqfI=,tag:GABM1rly3+kWvM2l7iROnw==,type:str] + password: ENC[AES256_GCM,data:5le4XY8+PjUNffEZJOPo4x3m6HS57Ns34GQNIYsZ2t3mnDdbAv8F1tmg9/cvzdc3JT1WjqvY/lvWWweIhrBBVA==,iv:IojlNhAzuTBFgHCAnb39O7VXsdU0tX4fXSiFPBbQipk=,tag:DpQPqwMFQTINZReTaRO0vQ==,type:str] + site_wide_secret: ENC[AES256_GCM,data:KJXodfkVU9x2CJicLR9riZfqp5k/OKuM70pooZcqx0vBi4Tw22BaKOkV/9IW0lYJ9h4LV+MUria601Wd0W/IEg==,iv:Y0Cwe5CqLReLYpnc5XhHo/rp8/DgE/xv6yEmyL8lXSA=,tag:KwQTZ0otdetpf0ZD5sXQGA==,type:str] sops: kms: [] gcp_kms: [] @@ -207,14 +217,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ2RXS08xbi9hR2tLSVM5 - eE5ITWdzMnozS0NMTjVkczNGSnd5UCtQZFdnCi9JZEZpSHAxdGtRLzZpVVhQWWp0 - RGJOczNXVGVmYXdQN2M4V3BiYTRINUkKLS0tIFdXaC9IcDhyU2kxN0xLdlhHNFBl - MGF4bVk5OHRMTE1pZ1MxeXZvaEpvVUkKfXqsjq5cR9Cobw2YjdKJSRDGyEJqpFDF - y9AW29DvZ/oxbW/vgtoiruPZZd0ttQSpovX+wbc5mCH4A949ckqpBA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzd0tKZER5NktFN1N1c0Vy + YS93S05IWGZVZXIyMHJWVUNmTVpxallITUc0CkJxV1BSMi9iNzl1OFhJQXNUTnk2 + bDN1WDNUZVBVYW9SN3k2SVNtQit0dE0KLS0tIENzYnVMdmloaGxEaGZwaUg2a3Ay + MWsxeklWdjRhMVdNamRneWNUa0pTc1EK/PtQwmTY5LjxVdrXtOhY/JqA8YrkS1wl + 4aGQVugee/uyFqKU2GIrw630mTTT39/2/jWeoEk6nJA1c3WJVEaxfQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-03-19T11:05:16Z" - mac: ENC[AES256_GCM,data:pHExX678QDJzYm+I8dyc9T2Kq+DLktVXGAvLWPqjvxRObL90Z/FpkEzb9EFS6dNvnWifrASsUqhDf7uXJU+R7y3KlgOxtSNGGQ+8VJ9nkfxxNaFdRwYXBKq+WqkZ5DfWfIIwdUN/K5eSUXx5Se+4MzokMWUhEdhO+dFSzERYFY4=,iv:7feVIvrTZAWskPPDQ5F6QxfJC+YNZY3R66fmenxnnts=,tag:RUgblvhjMr6NGelMiVyiNw==,type:str] + lastmodified: "2025-03-31T14:12:11Z" + mac: ENC[AES256_GCM,data:rAnFG0KAhgVZ8Tr0bsyOEAK0uxB0beJiH22FSta8iUOVWzRpuipHmY2+gmjimbQu9hcvyPzlPyyY3q5n29ROgcXKAwpoR/LOkBq0aBlweBnKoyiF3U5WkK5RABWEzq0nIlgd5kU4sQU0OO4i0ZD8NnV3IpzGhMhRNMowQq/Fa4U=,iv:O8hl8VGTIEtD4OdhkVPDhLN2V+PAsM+U11Z1lW74flA=,tag:8Bk3Jibf7jJnoY9wegJpPg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -246,14 +256,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ2RXS08xbi9hR2tLSVM5 - eE5ITWdzMnozS0NMTjVkczNGSnd5UCtQZFdnCi9JZEZpSHAxdGtRLzZpVVhQWWp0 - RGJOczNXVGVmYXdQN2M4V3BiYTRINUkKLS0tIFdXaC9IcDhyU2kxN0xLdlhHNFBl - MGF4bVk5OHRMTE1pZ1MxeXZvaEpvVUkKfXqsjq5cR9Cobw2YjdKJSRDGyEJqpFDF - y9AW29DvZ/oxbW/vgtoiruPZZd0ttQSpovX+wbc5mCH4A949ckqpBA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzd0tKZER5NktFN1N1c0Vy + YS93S05IWGZVZXIyMHJWVUNmTVpxallITUc0CkJxV1BSMi9iNzl1OFhJQXNUTnk2 + bDN1WDNUZVBVYW9SN3k2SVNtQit0dE0KLS0tIENzYnVMdmloaGxEaGZwaUg2a3Ay + MWsxeklWdjRhMVdNamRneWNUa0pTc1EK/PtQwmTY5LjxVdrXtOhY/JqA8YrkS1wl + 4aGQVugee/uyFqKU2GIrw630mTTT39/2/jWeoEk6nJA1c3WJVEaxfQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-03-19T11:05:16Z" - mac: ENC[AES256_GCM,data:pHExX678QDJzYm+I8dyc9T2Kq+DLktVXGAvLWPqjvxRObL90Z/FpkEzb9EFS6dNvnWifrASsUqhDf7uXJU+R7y3KlgOxtSNGGQ+8VJ9nkfxxNaFdRwYXBKq+WqkZ5DfWfIIwdUN/K5eSUXx5Se+4MzokMWUhEdhO+dFSzERYFY4=,iv:7feVIvrTZAWskPPDQ5F6QxfJC+YNZY3R66fmenxnnts=,tag:RUgblvhjMr6NGelMiVyiNw==,type:str] + lastmodified: "2025-03-31T14:12:11Z" + mac: ENC[AES256_GCM,data:rAnFG0KAhgVZ8Tr0bsyOEAK0uxB0beJiH22FSta8iUOVWzRpuipHmY2+gmjimbQu9hcvyPzlPyyY3q5n29ROgcXKAwpoR/LOkBq0aBlweBnKoyiF3U5WkK5RABWEzq0nIlgd5kU4sQU0OO4i0ZD8NnV3IpzGhMhRNMowQq/Fa4U=,iv:O8hl8VGTIEtD4OdhkVPDhLN2V+PAsM+U11Z1lW74flA=,tag:8Bk3Jibf7jJnoY9wegJpPg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 diff --git a/apps/base/mariadb-operator/mariadb.yaml b/apps/base/mariadb-operator/mariadb.yaml @@ -270,7 +270,7 @@ metadata: name: grant-bugzilla spec: mariaDbRef: - name: bugzilla + name: mariadb privileges: - "ALL PRIVILEGES" database: "bugzilla"