cluster

commit 51ebfb311c9d4a7b06500d64b5fc828f5ab237cf
parent a86fd07f0efbca21bbe902247d50ce6e6c373852
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sat,  4 May 2024 13:23:28 +0200

Migrate signing keys

Diffstat:
A
apps/2024_cluster/secrets/draupnir-synapse-signingkey.yaml
 | 
28
++++++++++++++++++++++++++++
M
apps/2024_cluster/secrets/kustomization.yaml
 | 
2
++
A
apps/2024_cluster/secrets/matrix-synapse-signingkey.yaml
 | 
28
++++++++++++++++++++++++++++

3 files changed, 58 insertions(+), 0 deletions(-)
diff --git a/apps/2024_cluster/secrets/draupnir-synapse-signingkey.yaml b/apps/2024_cluster/secrets/draupnir-synapse-signingkey.yaml
@@ -0,0 +1,28 @@
+apiVersion: v1
+data:
+    signing.key: ENC[AES256_GCM,data:7m9+GunikEVKkfJPS9/NwN4QqmbuHXAjKqoQEf9w00h8bTODFShbcb2fnWs+/hz2D2Kz/czQxmM6stB5DzA/OM6wB4OuYKV7WyidxTtk3ZY=,iv:wxxGYAy3T/pvuCPU0ehyKjZoeHCGTUQVYb+vZnglLYM=,tag:nEy4DHax+YJctqN02ltirw==,type:str]
+kind: Secret
+metadata:
+    name: draupnir-synapse-signingkey
+    namespace: matrix
+type: Opaque
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2a041ZWhtZndzZzlSMnFY
+            NldCZWlaS2FNT0FmZUR4clVSWmRUbTdIRTNjCmV5SWxUQjRSNGdNVkdoelVsNTBO
+            Y3gyS0ZzeGlrNkFHTi95K1JyenZCQzAKLS0tIDI4OWx2OWhteTkrV0lUVjNKU1dZ
+            aWlxSTFSOFRWTHR3QzRjTlRmM2J0SUkKIHUKjlSDmArexK2KIvpg8W5cc6HuSkgt
+            rURKcJRot+Tx42kzYJ6MGAIzs01cfeTTfBfnRE3e73DA3iZYFSkKbw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-05-04T11:21:36Z"
+    mac: ENC[AES256_GCM,data:yLqOQJIqooPigR9hekPyMd2bEfobT7aog+pALJCLjDwbXsxLD12pjSKGChT9SqbHivq4jgtiKDlEiqOosTXWwQev6RFaXCetSNx8eQ711tt27SQsGFhEReFLuHaE806LkR71PHCQ86gUPglZONt2nwJtyFtq+KV/3OB5embBpWk=,iv:1XGTJI0bPwOy0QzXUG/5lpJzSGrqwyroeIBNLdJCVbk=,tag:MCyjHOm6IIn4PTfSHwsmMQ==,type:str]
+    pgp: []
+    encrypted_regex: ^(clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
+    version: 3.8.1
diff --git a/apps/2024_cluster/secrets/kustomization.yaml b/apps/2024_cluster/secrets/kustomization.yaml
@@ -5,3 +5,5 @@ resources:
   - cloudflare.yaml
   - draupnir-appservice-secret.yaml
   - draupnir-fluffy-config.yaml
+  - draupnir-synapse-signingkey.yaml
+  - matrix-synapse-signingkey.yaml
diff --git a/apps/2024_cluster/secrets/matrix-synapse-signingkey.yaml b/apps/2024_cluster/secrets/matrix-synapse-signingkey.yaml
@@ -0,0 +1,28 @@
+apiVersion: v1
+data:
+    signing.key: ENC[AES256_GCM,data:oyGFlFiF4uLodcVxEjbfyAeT/TmC1JFUFFOiChK1aGmieMDt8QMqBN4+pndgNbQiqUpIHa0GEQZJd2enIfGopMsxaUYsOZiG6TfRLN3SRNs=,iv:abYEJB6RSpgK1FGdCNXXRdceCHXRFW1CYtDuvtF3b0Y=,tag:YYdjjsAhCQmJeEg2vhuVYw==,type:str]
+kind: Secret
+metadata:
+    name: matrix-synapse-signingkey
+    namespace: matrix
+type: Opaque
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPWjlCTE13V3lJb3B0QmNX
+            NXM5NnVRU21FWGJKZlZLdGJ4anF1cDNiNVNzCjFCazB3L216NktNQjJqbWRRRFFr
+            a2VjcGl1U09iNnRKcmM4dXhTSU1sL0kKLS0tIElDRzFLSThkQmlLQ3lFYzVQYm1n
+            Nlc2emswRlc3SmxmK2tuTkVlYTdFS3MK/rbWuzL6j93sFNGICUdwr29jYQ1G4MTy
+            eAfyHgaLT9h+QpQ6Tag72k+qOObignTqWh3nANEDf+ITLOzjxO5aiw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-05-04T11:23:08Z"
+    mac: ENC[AES256_GCM,data:EPdqB2RQEyPbh4N/VZ5L0Fb1hcQAbT3bXyPLlhNyZEQH6jrMZ74yHCFLzC5GfNnGJsrSARnieZqpVVIlsfae2CMDTYIR4cFjxUWv/2HEJeKik9PtrlO882dySGLjwxiOpsebhQRpbhfMI5I54IPh2W1AC7KenC/S4pEC9vfB22o=,iv:iiRBFBZ3+o1/pUIn5Zkfzp3dNh/Wvagb+WsmxoX/3VI=,tag:WtVZTPRG0yZMgjqxWsmpyA==,type:str]
+    pgp: []
+    encrypted_regex: ^(clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
+    version: 3.8.1