cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

commit 52003de6f00ad02c6a67120701ae0984a531cc4c
parent 17aca9dbabf5a297e77d461c03fb288b4ba93166
Author: MTRNord <mtrnord1@gmail.com>
Date:   Wed, 19 Feb 2025 13:41:56 +0100

Migrate capacitor to HTTPRoute

Diffstat:
Mapps/base/envoy-gateway/release.yaml | 211++++++++++++++++++++++++++++++++++++++++++-------------------------------------
Minfrastructure/controllers/capacitor.yaml | 86++++++++++++++++++++++++++++++++++++++++----------------------------------------
2 files changed, 154 insertions(+), 143 deletions(-)

diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml @@ -14,6 +14,17 @@ spec: minAvailable: 1 deployment: replicas: 3 + + config: + # -- EnvoyGateway configuration. Visit https://gateway.envoyproxy.io/docs/api/extension_types/#envoygateway to view all options. + envoyGateway: + gateway: + controllerName: gateway.envoyproxy.io/gatewayclass-controller + provider: + type: Kubernetes + logging: + level: + default: debug --- apiVersion: gateway.envoyproxy.io/v1alpha1 kind: EnvoyProxy @@ -62,42 +73,42 @@ spec: protocol: TCP port: 25 allowedRoutes: - kinds: - - kind: TCPRoute - namespaces: - from: All + kinds: + - kind: TCPRoute + namespaces: + from: All - name: submissions protocol: TCP port: 465 allowedRoutes: - kinds: - - kind: TCPRoute - namespaces: - from: All + kinds: + - kind: TCPRoute + namespaces: + from: All - name: submission protocol: TCP port: 587 allowedRoutes: - kinds: - - kind: TCPRoute - namespaces: - from: All + kinds: + - kind: TCPRoute + namespaces: + from: All - name: imap protocol: TCP port: 143 allowedRoutes: - kinds: - - kind: TCPRoute - namespaces: - from: All + kinds: + - kind: TCPRoute + namespaces: + from: All - name: imaps protocol: TCP port: 993 allowedRoutes: - kinds: - - kind: TCPRoute - namespaces: - from: All + kinds: + - kind: TCPRoute + namespaces: + from: All --- apiVersion: gateway.networking.k8s.io/v1 kind: Gateway @@ -122,163 +133,163 @@ spec: hostname: "mas.midnightthoughts.space" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: midnightthoughts.space-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: midnightthoughts.space-tls - name: https-matrix-midnightthoughts protocol: HTTPS hostname: "matrix.midnightthoughts.space" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: matrix.midnightthoughts.space-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: matrix.midnightthoughts.space-tls - name: https-draupnir-midnightthoughts protocol: HTTPS hostname: "draupnir.midnightthoughts.space" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: draupnir.midnightthoughts.space-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: draupnir.midnightthoughts.space-tls - name: https-matrix-draupnir-midnightthoughts protocol: HTTPS hostname: "matrix.draupnir.midnightthoughts.space" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: matrix.draupnir.midnightthoughts.space-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: matrix.draupnir.midnightthoughts.space-tls - name: https-docuseal-midnightthoughts protocol: HTTPS hostname: "docuseal.midnightthoughts.space" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: docuseal.midnightthoughts.space-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: docuseal.midnightthoughts.space-tls - name: https-midnightthoughts-neoboard protocol: HTTPS hostname: "miro-export.neoboard.midnightthoughts.space" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: miro-export.neoboard.midnightthoughts.space-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: miro-export.neoboard.midnightthoughts.space-tls - name: https-midnightthoughts-certs protocol: HTTPS hostname: "certs.midnightthoughts.space" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: certs.midnightthoughts.space-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: certs.midnightthoughts.space-tls - name: https-midnightthoughts-capacitor protocol: HTTPS hostname: "ui.k8s.midnightthoughts.space" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: ui.k8s.midnightthoughts.space-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: ui.k8s.midnightthoughts.space-tls - name: https-midnightthoughts-root protocol: HTTPS hostname: "midnightthoughts.space" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: midnightthoughts.space-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: midnightthoughts.space-tls - name: https-nordgedanken-root protocol: HTTPS hostname: "nordgedanken.dev" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: nordgedanken.dev-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: nordgedanken.dev-tls - name: https-nordgedanken protocol: HTTPS hostname: "*.nordgedanken.dev" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: nordgedanken.dev-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: nordgedanken.dev-tls - name: https-mtrnord-blog-root protocol: HTTPS hostname: "mtrnord.blog" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: mtrnord.blog-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: mtrnord.blog-tls - name: https-mtrnord-blog protocol: HTTPS hostname: "*.mtrnord.blog" port: 443 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" tls: - mode: Terminate - certificateRefs: - - kind: Secret - name: mtrnord.blog-tls + mode: Terminate + certificateRefs: + - kind: Secret + name: mtrnord.blog-tls - name: http protocol: HTTP port: 80 allowedRoutes: - namespaces: - from: "All" + namespaces: + from: "All" --- apiVersion: gateway.envoyproxy.io/v1alpha1 kind: ClientTrafficPolicy diff --git a/infrastructure/controllers/capacitor.yaml b/infrastructure/controllers/capacitor.yaml @@ -17,14 +17,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJcDJxd3F6cVVGWTFJOU5J - SC81Y0J6a0VPYTk2SzBEenJ0bVNSd3Y4b1Y4Cit0WjdORy8xVnlOaHdoZWM4aGp6 - YkFaWlFuaHBZRGd0ZzEzcExPL2JoWHcKLS0tIFdHdGt5TlFiRzhpQk5FVE9GOGRB - aDl4a1AxNjEySjJPQ3YwRkRLMjNTbFUKaMn8/Aek5tFsNgqVogAkrxSs3EO2LhrP - FWMnRXP5JjKmTQTQNnbo4w9/VNL0YD+ftsOAC7gCLUpNpSoKWUhubQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPMHUrQ2wrTlA4S0FpMDdL + YndOQ1lEOEUvSXFjNTArMjEzQ1JWa2kwZnh3CjlUSE0zWXI2enAzTFlzeTV6dXVK + WTFBWW8rc1Z0N2FsaUNZSXZvcGduMTgKLS0tIDVTUFdyNHJ0WTlyOXl0aktNYlFM + aFdZZVA5ZkFKNUFlalN3eUdTcWZJREEKBB+bKDO/TvcD8jE+36RnduwC2k5jJx4N + 0FSpeDsEN4wvr0fKa+Sh4xeSSaBCTr9o8BKERNUowAbdnIOhcfZSCA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-19T11:32:35Z" - mac: ENC[AES256_GCM,data:DzmDqJYKERIZk6CrRNWt+EtaxQz4iphpxJnhylvMyU4hOQJHhlppDul+d12YcQRI4+p7HPeTBcp1+F4SuPEnD/QDUTvaBEArIH8dQ4wPIOMjbS3H7IpjoGSrTzCm7GkJW77h+wP7Z5ndf16kDHS8TAT6wflfvjLtPOuJC6avg10=,iv:u3JmCKwHufRJRrh54SHeamKoyLUaU0zlDMeMUsuFj0o=,tag:HmKViwIWZapGexlKw0U2OA==,type:str] + lastmodified: "2025-02-19T12:41:53Z" + mac: ENC[AES256_GCM,data:bOr7GaWDY6pYhefM8nUIn1xbyAzEXalbtFMHGfTumJiBXO2jI0LJltHVMDulzCfWXFw+lR7RSGp28NVQQktmhW0kNjGDnZGjYn3bN8biNtGSB3mL/Tk2llNCVr/61iYjJ91KwmaDM6xLN7VoeWgi+jqrfCaV4So6YqvoWkK6faQ=,iv:Zqx8CuNrOR0W5H9+quYKryr2ia/K4ChqBMNCrHlJw5Q=,tag:02tdOUplgWpT6ML41z6yYg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -54,14 +54,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJcDJxd3F6cVVGWTFJOU5J - SC81Y0J6a0VPYTk2SzBEenJ0bVNSd3Y4b1Y4Cit0WjdORy8xVnlOaHdoZWM4aGp6 - YkFaWlFuaHBZRGd0ZzEzcExPL2JoWHcKLS0tIFdHdGt5TlFiRzhpQk5FVE9GOGRB - aDl4a1AxNjEySjJPQ3YwRkRLMjNTbFUKaMn8/Aek5tFsNgqVogAkrxSs3EO2LhrP - FWMnRXP5JjKmTQTQNnbo4w9/VNL0YD+ftsOAC7gCLUpNpSoKWUhubQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPMHUrQ2wrTlA4S0FpMDdL + YndOQ1lEOEUvSXFjNTArMjEzQ1JWa2kwZnh3CjlUSE0zWXI2enAzTFlzeTV6dXVK + WTFBWW8rc1Z0N2FsaUNZSXZvcGduMTgKLS0tIDVTUFdyNHJ0WTlyOXl0aktNYlFM + aFdZZVA5ZkFKNUFlalN3eUdTcWZJREEKBB+bKDO/TvcD8jE+36RnduwC2k5jJx4N + 0FSpeDsEN4wvr0fKa+Sh4xeSSaBCTr9o8BKERNUowAbdnIOhcfZSCA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-19T11:32:35Z" - mac: ENC[AES256_GCM,data:DzmDqJYKERIZk6CrRNWt+EtaxQz4iphpxJnhylvMyU4hOQJHhlppDul+d12YcQRI4+p7HPeTBcp1+F4SuPEnD/QDUTvaBEArIH8dQ4wPIOMjbS3H7IpjoGSrTzCm7GkJW77h+wP7Z5ndf16kDHS8TAT6wflfvjLtPOuJC6avg10=,iv:u3JmCKwHufRJRrh54SHeamKoyLUaU0zlDMeMUsuFj0o=,tag:HmKViwIWZapGexlKw0U2OA==,type:str] + lastmodified: "2025-02-19T12:41:53Z" + mac: ENC[AES256_GCM,data:bOr7GaWDY6pYhefM8nUIn1xbyAzEXalbtFMHGfTumJiBXO2jI0LJltHVMDulzCfWXFw+lR7RSGp28NVQQktmhW0kNjGDnZGjYn3bN8biNtGSB3mL/Tk2llNCVr/61iYjJ91KwmaDM6xLN7VoeWgi+jqrfCaV4So6YqvoWkK6faQ=,iv:Zqx8CuNrOR0W5H9+quYKryr2ia/K4ChqBMNCrHlJw5Q=,tag:02tdOUplgWpT6ML41z6yYg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -73,7 +73,7 @@ metadata: namespace: flux-system type: Opaque stringData: - client-secret: ENC[AES256_GCM,data:o5+cERuWBdVfiChbFrAnrtoQcWDBskWS1HNweD6xrOoBW7rde3bNxTwKl7XOX3+2YXZWrje+oOOWciK0JLaGDW1687rVY+lUpwfFJODlhwBFt6oBxzLFEjDEQSAnWXNaL2C8wW7Zi328+m9Si/Ud5BuzV3DL+7Tq5j3w7ZCQKpQ=,iv:dzHl1k8JXybGmvPCl2r94FOgPqmnell4B+h1O84XNs8=,tag:p1ehIVVp7Ko9efqb2G8dhA==,type:str] + client-secret: ENC[AES256_GCM,data:UDUkutZ3WQwfD8vZbb+NgVCoe4um7YBBXzBtFOPY1eRyYzHyzlW3UIaJdPFC0ogwmrhCenOq4sGA2P0LcW8VhtujZrkaY1PQOYES15plKH2qQJMdsTD+hKI/NPofVU7YpaoIdX17ovHTdxvaZXHwgjjvxuRC+aj5iB4uVeq42c4=,iv:Y6gYgEsK7MvnqBgt+ltDWi06KGJxxgQRij2bw47GR90=,tag:Sn/GtngNhep6BjLlto0lLw==,type:str] sops: kms: [] gcp_kms: [] @@ -83,14 +83,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJcDJxd3F6cVVGWTFJOU5J - SC81Y0J6a0VPYTk2SzBEenJ0bVNSd3Y4b1Y4Cit0WjdORy8xVnlOaHdoZWM4aGp6 - YkFaWlFuaHBZRGd0ZzEzcExPL2JoWHcKLS0tIFdHdGt5TlFiRzhpQk5FVE9GOGRB - aDl4a1AxNjEySjJPQ3YwRkRLMjNTbFUKaMn8/Aek5tFsNgqVogAkrxSs3EO2LhrP - FWMnRXP5JjKmTQTQNnbo4w9/VNL0YD+ftsOAC7gCLUpNpSoKWUhubQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPMHUrQ2wrTlA4S0FpMDdL + YndOQ1lEOEUvSXFjNTArMjEzQ1JWa2kwZnh3CjlUSE0zWXI2enAzTFlzeTV6dXVK + WTFBWW8rc1Z0N2FsaUNZSXZvcGduMTgKLS0tIDVTUFdyNHJ0WTlyOXl0aktNYlFM + aFdZZVA5ZkFKNUFlalN3eUdTcWZJREEKBB+bKDO/TvcD8jE+36RnduwC2k5jJx4N + 0FSpeDsEN4wvr0fKa+Sh4xeSSaBCTr9o8BKERNUowAbdnIOhcfZSCA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-19T11:32:35Z" - mac: ENC[AES256_GCM,data:DzmDqJYKERIZk6CrRNWt+EtaxQz4iphpxJnhylvMyU4hOQJHhlppDul+d12YcQRI4+p7HPeTBcp1+F4SuPEnD/QDUTvaBEArIH8dQ4wPIOMjbS3H7IpjoGSrTzCm7GkJW77h+wP7Z5ndf16kDHS8TAT6wflfvjLtPOuJC6avg10=,iv:u3JmCKwHufRJRrh54SHeamKoyLUaU0zlDMeMUsuFj0o=,tag:HmKViwIWZapGexlKw0U2OA==,type:str] + lastmodified: "2025-02-19T12:41:53Z" + mac: ENC[AES256_GCM,data:bOr7GaWDY6pYhefM8nUIn1xbyAzEXalbtFMHGfTumJiBXO2jI0LJltHVMDulzCfWXFw+lR7RSGp28NVQQktmhW0kNjGDnZGjYn3bN8biNtGSB3mL/Tk2llNCVr/61iYjJ91KwmaDM6xLN7VoeWgi+jqrfCaV4So6YqvoWkK6faQ=,iv:Zqx8CuNrOR0W5H9+quYKryr2ia/K4ChqBMNCrHlJw5Q=,tag:02tdOUplgWpT6ML41z6yYg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -122,14 +122,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJcDJxd3F6cVVGWTFJOU5J - SC81Y0J6a0VPYTk2SzBEenJ0bVNSd3Y4b1Y4Cit0WjdORy8xVnlOaHdoZWM4aGp6 - YkFaWlFuaHBZRGd0ZzEzcExPL2JoWHcKLS0tIFdHdGt5TlFiRzhpQk5FVE9GOGRB - aDl4a1AxNjEySjJPQ3YwRkRLMjNTbFUKaMn8/Aek5tFsNgqVogAkrxSs3EO2LhrP - FWMnRXP5JjKmTQTQNnbo4w9/VNL0YD+ftsOAC7gCLUpNpSoKWUhubQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPMHUrQ2wrTlA4S0FpMDdL + YndOQ1lEOEUvSXFjNTArMjEzQ1JWa2kwZnh3CjlUSE0zWXI2enAzTFlzeTV6dXVK + WTFBWW8rc1Z0N2FsaUNZSXZvcGduMTgKLS0tIDVTUFdyNHJ0WTlyOXl0aktNYlFM + aFdZZVA5ZkFKNUFlalN3eUdTcWZJREEKBB+bKDO/TvcD8jE+36RnduwC2k5jJx4N + 0FSpeDsEN4wvr0fKa+Sh4xeSSaBCTr9o8BKERNUowAbdnIOhcfZSCA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-19T11:32:35Z" - mac: ENC[AES256_GCM,data:DzmDqJYKERIZk6CrRNWt+EtaxQz4iphpxJnhylvMyU4hOQJHhlppDul+d12YcQRI4+p7HPeTBcp1+F4SuPEnD/QDUTvaBEArIH8dQ4wPIOMjbS3H7IpjoGSrTzCm7GkJW77h+wP7Z5ndf16kDHS8TAT6wflfvjLtPOuJC6avg10=,iv:u3JmCKwHufRJRrh54SHeamKoyLUaU0zlDMeMUsuFj0o=,tag:HmKViwIWZapGexlKw0U2OA==,type:str] + lastmodified: "2025-02-19T12:41:53Z" + mac: ENC[AES256_GCM,data:bOr7GaWDY6pYhefM8nUIn1xbyAzEXalbtFMHGfTumJiBXO2jI0LJltHVMDulzCfWXFw+lR7RSGp28NVQQktmhW0kNjGDnZGjYn3bN8biNtGSB3mL/Tk2llNCVr/61iYjJ91KwmaDM6xLN7VoeWgi+jqrfCaV4So6YqvoWkK6faQ=,iv:Zqx8CuNrOR0W5H9+quYKryr2ia/K4ChqBMNCrHlJw5Q=,tag:02tdOUplgWpT6ML41z6yYg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -165,14 +165,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJcDJxd3F6cVVGWTFJOU5J - SC81Y0J6a0VPYTk2SzBEenJ0bVNSd3Y4b1Y4Cit0WjdORy8xVnlOaHdoZWM4aGp6 - YkFaWlFuaHBZRGd0ZzEzcExPL2JoWHcKLS0tIFdHdGt5TlFiRzhpQk5FVE9GOGRB - aDl4a1AxNjEySjJPQ3YwRkRLMjNTbFUKaMn8/Aek5tFsNgqVogAkrxSs3EO2LhrP - FWMnRXP5JjKmTQTQNnbo4w9/VNL0YD+ftsOAC7gCLUpNpSoKWUhubQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPMHUrQ2wrTlA4S0FpMDdL + YndOQ1lEOEUvSXFjNTArMjEzQ1JWa2kwZnh3CjlUSE0zWXI2enAzTFlzeTV6dXVK + WTFBWW8rc1Z0N2FsaUNZSXZvcGduMTgKLS0tIDVTUFdyNHJ0WTlyOXl0aktNYlFM + aFdZZVA5ZkFKNUFlalN3eUdTcWZJREEKBB+bKDO/TvcD8jE+36RnduwC2k5jJx4N + 0FSpeDsEN4wvr0fKa+Sh4xeSSaBCTr9o8BKERNUowAbdnIOhcfZSCA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-19T11:32:35Z" - mac: ENC[AES256_GCM,data:DzmDqJYKERIZk6CrRNWt+EtaxQz4iphpxJnhylvMyU4hOQJHhlppDul+d12YcQRI4+p7HPeTBcp1+F4SuPEnD/QDUTvaBEArIH8dQ4wPIOMjbS3H7IpjoGSrTzCm7GkJW77h+wP7Z5ndf16kDHS8TAT6wflfvjLtPOuJC6avg10=,iv:u3JmCKwHufRJRrh54SHeamKoyLUaU0zlDMeMUsuFj0o=,tag:HmKViwIWZapGexlKw0U2OA==,type:str] + lastmodified: "2025-02-19T12:41:53Z" + mac: ENC[AES256_GCM,data:bOr7GaWDY6pYhefM8nUIn1xbyAzEXalbtFMHGfTumJiBXO2jI0LJltHVMDulzCfWXFw+lR7RSGp28NVQQktmhW0kNjGDnZGjYn3bN8biNtGSB3mL/Tk2llNCVr/61iYjJ91KwmaDM6xLN7VoeWgi+jqrfCaV4So6YqvoWkK6faQ=,iv:Zqx8CuNrOR0W5H9+quYKryr2ia/K4ChqBMNCrHlJw5Q=,tag:02tdOUplgWpT6ML41z6yYg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1 @@ -201,14 +201,14 @@ sops: - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJcDJxd3F6cVVGWTFJOU5J - SC81Y0J6a0VPYTk2SzBEenJ0bVNSd3Y4b1Y4Cit0WjdORy8xVnlOaHdoZWM4aGp6 - YkFaWlFuaHBZRGd0ZzEzcExPL2JoWHcKLS0tIFdHdGt5TlFiRzhpQk5FVE9GOGRB - aDl4a1AxNjEySjJPQ3YwRkRLMjNTbFUKaMn8/Aek5tFsNgqVogAkrxSs3EO2LhrP - FWMnRXP5JjKmTQTQNnbo4w9/VNL0YD+ftsOAC7gCLUpNpSoKWUhubQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPMHUrQ2wrTlA4S0FpMDdL + YndOQ1lEOEUvSXFjNTArMjEzQ1JWa2kwZnh3CjlUSE0zWXI2enAzTFlzeTV6dXVK + WTFBWW8rc1Z0N2FsaUNZSXZvcGduMTgKLS0tIDVTUFdyNHJ0WTlyOXl0aktNYlFM + aFdZZVA5ZkFKNUFlalN3eUdTcWZJREEKBB+bKDO/TvcD8jE+36RnduwC2k5jJx4N + 0FSpeDsEN4wvr0fKa+Sh4xeSSaBCTr9o8BKERNUowAbdnIOhcfZSCA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-19T11:32:35Z" - mac: ENC[AES256_GCM,data:DzmDqJYKERIZk6CrRNWt+EtaxQz4iphpxJnhylvMyU4hOQJHhlppDul+d12YcQRI4+p7HPeTBcp1+F4SuPEnD/QDUTvaBEArIH8dQ4wPIOMjbS3H7IpjoGSrTzCm7GkJW77h+wP7Z5ndf16kDHS8TAT6wflfvjLtPOuJC6avg10=,iv:u3JmCKwHufRJRrh54SHeamKoyLUaU0zlDMeMUsuFj0o=,tag:HmKViwIWZapGexlKw0U2OA==,type:str] + lastmodified: "2025-02-19T12:41:53Z" + mac: ENC[AES256_GCM,data:bOr7GaWDY6pYhefM8nUIn1xbyAzEXalbtFMHGfTumJiBXO2jI0LJltHVMDulzCfWXFw+lR7RSGp28NVQQktmhW0kNjGDnZGjYn3bN8biNtGSB3mL/Tk2llNCVr/61iYjJ91KwmaDM6xLN7VoeWgi+jqrfCaV4So6YqvoWkK6faQ=,iv:Zqx8CuNrOR0W5H9+quYKryr2ia/K4ChqBMNCrHlJw5Q=,tag:02tdOUplgWpT6ML41z6yYg==,type:str] pgp: [] encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$ version: 3.9.1