commit 55b51bd0a286209ee384018b1838597f74bd2151
parent 422d455f196764d5e2fa9d3171d2a61f81639c3e
Author: MTRNord <mtrnord1@gmail.com>
Date: Wed, 19 Feb 2025 12:22:50 +0100
Migrate capacitor to HTTPRoute
Diffstat:
1 file changed, 98 insertions(+), 62 deletions(-)
diff --git a/infrastructure/controllers/capacitor.yaml b/infrastructure/controllers/capacitor.yaml
@@ -7,7 +7,7 @@ spec:
interval: 12h
url: oci://ghcr.io/gimlet-io/capacitor-manifests
ref:
- semver: ">=0.4.2"
+ semver: '>=0.4.2'
sops:
kms: []
gcp_kms: []
@@ -16,15 +16,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
- UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
- aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
- Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
- FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-02-19T10:48:23Z"
- mac: ENC[AES256_GCM,data:8YH3YEU1rQ8JIwGDPSgxDQNUZfgiUJeTgjLBWoaMzGTLfTBU1YFz0L8kBgIju4u5nIncROIK1kGxuTZSHMohnoGAmtQzDslXefnMh8a9IKvtkVSkcg1FY7M9edV28xMdFIx5QH9XI8db827lroLkfjWCiWzzWgKf/PbqlCiEpsU=,iv:Ms430aZThq79GgvyONkQu+B7n1aKu1sYQ/wmgNur7wU=,tag:xvthdFK6nQaLBbzy/Tki3A==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5MWplckhUTHE1Ym9yNVdp
+ MUdMY0kvVmRqTFk0b1BXbTljVCswT3Y2M2xVCjVjT3JMMWJWQWRBVENNVnlSbXNz
+ eTQ0czg5NDdXYUYrMy9kUC9OTnZCaDgKLS0tIEFmdEdEMkdYbXA3eURkQy9oclZs
+ MTdkclBla2RveGVtQzdLbG1UZmdWcE0Kc/YTjoHpHZEG/xP37UVdHgqYpbA8zdTz
+ oO5tI6DrveNvQQy22aQvmeUa2PoJrl7CbTDC7PXDBhFWOJF5FJtZ6g==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-02-19T11:22:44Z"
+ mac: ENC[AES256_GCM,data:ohg1VEP1CcdFQPa+qTSV4zLEXVrMQXKp9FWzpShinwK7qIsYhctqR3mNV9zbegR3HnCj47EijuD8NZiVPRQYsVblQzQI29AQohyfdhljO89UXdttl9pBmQMRD+zoWundRm/xzs559Lyo4TZomUdM59J7w5vEReRw8SBhytx0de0=,iv:H+/wiSFCVUzKiG569J0l7/JBYaoWxJNiUJNaiLa4354=,tag:9S7Bjdf3IQJljlwLn/xJUw==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -53,15 +53,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
- UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
- aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
- Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
- FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-02-19T10:48:23Z"
- mac: ENC[AES256_GCM,data:8YH3YEU1rQ8JIwGDPSgxDQNUZfgiUJeTgjLBWoaMzGTLfTBU1YFz0L8kBgIju4u5nIncROIK1kGxuTZSHMohnoGAmtQzDslXefnMh8a9IKvtkVSkcg1FY7M9edV28xMdFIx5QH9XI8db827lroLkfjWCiWzzWgKf/PbqlCiEpsU=,iv:Ms430aZThq79GgvyONkQu+B7n1aKu1sYQ/wmgNur7wU=,tag:xvthdFK6nQaLBbzy/Tki3A==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5MWplckhUTHE1Ym9yNVdp
+ MUdMY0kvVmRqTFk0b1BXbTljVCswT3Y2M2xVCjVjT3JMMWJWQWRBVENNVnlSbXNz
+ eTQ0czg5NDdXYUYrMy9kUC9OTnZCaDgKLS0tIEFmdEdEMkdYbXA3eURkQy9oclZs
+ MTdkclBla2RveGVtQzdLbG1UZmdWcE0Kc/YTjoHpHZEG/xP37UVdHgqYpbA8zdTz
+ oO5tI6DrveNvQQy22aQvmeUa2PoJrl7CbTDC7PXDBhFWOJF5FJtZ6g==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-02-19T11:22:44Z"
+ mac: ENC[AES256_GCM,data:ohg1VEP1CcdFQPa+qTSV4zLEXVrMQXKp9FWzpShinwK7qIsYhctqR3mNV9zbegR3HnCj47EijuD8NZiVPRQYsVblQzQI29AQohyfdhljO89UXdttl9pBmQMRD+zoWundRm/xzs559Lyo4TZomUdM59J7w5vEReRw8SBhytx0de0=,iv:H+/wiSFCVUzKiG569J0l7/JBYaoWxJNiUJNaiLa4354=,tag:9S7Bjdf3IQJljlwLn/xJUw==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -73,7 +73,7 @@ metadata:
namespace: flux-system
type: Opaque
stringData:
- client-secret: ENC[AES256_GCM,data:sAcJe6/bvxBFCy7LyYwaBbu4H606Z5TIgD1aumFuJiP7MzHH2QIvYTXUMWK+PtueGpnBGnNtzHXTLcWgBBqIo+67w5SlhiPdVOshyxwL4CD0AxYwnpHp1H9yw7JFoRuqc7fS3q2fQasPkWzik0RCDdPY27XRXDEOx1Oa6OIpQNA=,iv:QnDWXG38qAZ4xqhoj/boDoHkgA8SikxgtMDh+2tI/bo=,tag:1fJHzx7+7XlWBwiT19TQCA==,type:str]
+ client-secret: ENC[AES256_GCM,data:2OHoGu7QVjr+ZuG4dIMRLdCiyCwNLRfNL5iubzSxpwaKl7HebV6roRzZXyGryzbzzRxN/86b/T4A52+BZ1/nNJh1Y1VQ0tPsv+ObLmvcLKznlsurfrBPI/gwl1qHp3/4nArFN3aNM7IrTdkYzVRZJgNF0S9+DuEMRbsStIFYhhQ=,iv:Oa6mDTZXzE1/Vrhrl6wGc5xdS6f1AKJDyLO+0SpWDGM=,tag:LP00RrjGce1MivOtJ9oV+A==,type:str]
sops:
kms: []
gcp_kms: []
@@ -82,15 +82,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
- UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
- aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
- Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
- FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-02-19T10:48:23Z"
- mac: ENC[AES256_GCM,data:8YH3YEU1rQ8JIwGDPSgxDQNUZfgiUJeTgjLBWoaMzGTLfTBU1YFz0L8kBgIju4u5nIncROIK1kGxuTZSHMohnoGAmtQzDslXefnMh8a9IKvtkVSkcg1FY7M9edV28xMdFIx5QH9XI8db827lroLkfjWCiWzzWgKf/PbqlCiEpsU=,iv:Ms430aZThq79GgvyONkQu+B7n1aKu1sYQ/wmgNur7wU=,tag:xvthdFK6nQaLBbzy/Tki3A==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5MWplckhUTHE1Ym9yNVdp
+ MUdMY0kvVmRqTFk0b1BXbTljVCswT3Y2M2xVCjVjT3JMMWJWQWRBVENNVnlSbXNz
+ eTQ0czg5NDdXYUYrMy9kUC9OTnZCaDgKLS0tIEFmdEdEMkdYbXA3eURkQy9oclZs
+ MTdkclBla2RveGVtQzdLbG1UZmdWcE0Kc/YTjoHpHZEG/xP37UVdHgqYpbA8zdTz
+ oO5tI6DrveNvQQy22aQvmeUa2PoJrl7CbTDC7PXDBhFWOJF5FJtZ6g==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-02-19T11:22:44Z"
+ mac: ENC[AES256_GCM,data:ohg1VEP1CcdFQPa+qTSV4zLEXVrMQXKp9FWzpShinwK7qIsYhctqR3mNV9zbegR3HnCj47EijuD8NZiVPRQYsVblQzQI29AQohyfdhljO89UXdttl9pBmQMRD+zoWundRm/xzs559Lyo4TZomUdM59J7w5vEReRw8SBhytx0de0=,iv:H+/wiSFCVUzKiG569J0l7/JBYaoWxJNiUJNaiLa4354=,tag:9S7Bjdf3IQJljlwLn/xJUw==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -108,11 +108,11 @@ spec:
- ui.k8s.midnightthoughts.space
rules:
- backendRefs:
- - name: capacitor
- port: 9000
+ - name: capacitor
+ port: 9000
timeouts:
- request: 240s
- backendRequest: 0s
+ request: 240s
+ backendRequest: 0s
sops:
kms: []
gcp_kms: []
@@ -121,15 +121,45 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
- UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
- aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
- Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
- FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-02-19T10:48:23Z"
- mac: ENC[AES256_GCM,data:8YH3YEU1rQ8JIwGDPSgxDQNUZfgiUJeTgjLBWoaMzGTLfTBU1YFz0L8kBgIju4u5nIncROIK1kGxuTZSHMohnoGAmtQzDslXefnMh8a9IKvtkVSkcg1FY7M9edV28xMdFIx5QH9XI8db827lroLkfjWCiWzzWgKf/PbqlCiEpsU=,iv:Ms430aZThq79GgvyONkQu+B7n1aKu1sYQ/wmgNur7wU=,tag:xvthdFK6nQaLBbzy/Tki3A==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5MWplckhUTHE1Ym9yNVdp
+ MUdMY0kvVmRqTFk0b1BXbTljVCswT3Y2M2xVCjVjT3JMMWJWQWRBVENNVnlSbXNz
+ eTQ0czg5NDdXYUYrMy9kUC9OTnZCaDgKLS0tIEFmdEdEMkdYbXA3eURkQy9oclZs
+ MTdkclBla2RveGVtQzdLbG1UZmdWcE0Kc/YTjoHpHZEG/xP37UVdHgqYpbA8zdTz
+ oO5tI6DrveNvQQy22aQvmeUa2PoJrl7CbTDC7PXDBhFWOJF5FJtZ6g==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-02-19T11:22:44Z"
+ mac: ENC[AES256_GCM,data:ohg1VEP1CcdFQPa+qTSV4zLEXVrMQXKp9FWzpShinwK7qIsYhctqR3mNV9zbegR3HnCj47EijuD8NZiVPRQYsVblQzQI29AQohyfdhljO89UXdttl9pBmQMRD+zoWundRm/xzs559Lyo4TZomUdM59J7w5vEReRw8SBhytx0de0=,iv:H+/wiSFCVUzKiG569J0l7/JBYaoWxJNiUJNaiLa4354=,tag:9S7Bjdf3IQJljlwLn/xJUw==,type:str]
+ pgp: []
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ version: 3.9.1
+---
+apiVersion: gateway.envoyproxy.io/v1alpha1
+kind: Backend
+metadata:
+ name: backend-authentik
+spec:
+ endpoints:
+ - fqdn:
+ hostname: auth.midnightthoughts.space
+ port: 443
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5MWplckhUTHE1Ym9yNVdp
+ MUdMY0kvVmRqTFk0b1BXbTljVCswT3Y2M2xVCjVjT3JMMWJWQWRBVENNVnlSbXNz
+ eTQ0czg5NDdXYUYrMy9kUC9OTnZCaDgKLS0tIEFmdEdEMkdYbXA3eURkQy9oclZs
+ MTdkclBla2RveGVtQzdLbG1UZmdWcE0Kc/YTjoHpHZEG/xP37UVdHgqYpbA8zdTz
+ oO5tI6DrveNvQQy22aQvmeUa2PoJrl7CbTDC7PXDBhFWOJF5FJtZ6g==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-02-19T11:22:44Z"
+ mac: ENC[AES256_GCM,data:ohg1VEP1CcdFQPa+qTSV4zLEXVrMQXKp9FWzpShinwK7qIsYhctqR3mNV9zbegR3HnCj47EijuD8NZiVPRQYsVblQzQI29AQohyfdhljO89UXdttl9pBmQMRD+zoWundRm/xzs559Lyo4TZomUdM59J7w5vEReRw8SBhytx0de0=,iv:H+/wiSFCVUzKiG569J0l7/JBYaoWxJNiUJNaiLa4354=,tag:9S7Bjdf3IQJljlwLn/xJUw==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -146,6 +176,11 @@ spec:
name: capacitor
oidc:
provider:
+ backendRefs:
+ - group: gateway.envoyproxy.io
+ kind: Backend
+ name: backend-authentik
+ port: 443
issuer: https://auth.midnightthoughts.space/application/o/capacitor/
authorizationEndpoint: https://auth.midnightthoughts.space/application/o/authorize/
tokenEndpoint: https://auth.midnightthoughts.space/application/o/token/
@@ -155,6 +190,7 @@ spec:
name: capacitor-oidc-config
redirectURL: https://ui.k8s.midnightthoughts.space/oauth2/callback
logoutPath: /logout
+ refreshToken: true
sops:
kms: []
gcp_kms: []
@@ -163,15 +199,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
- UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
- aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
- Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
- FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-02-19T10:48:23Z"
- mac: ENC[AES256_GCM,data:8YH3YEU1rQ8JIwGDPSgxDQNUZfgiUJeTgjLBWoaMzGTLfTBU1YFz0L8kBgIju4u5nIncROIK1kGxuTZSHMohnoGAmtQzDslXefnMh8a9IKvtkVSkcg1FY7M9edV28xMdFIx5QH9XI8db827lroLkfjWCiWzzWgKf/PbqlCiEpsU=,iv:Ms430aZThq79GgvyONkQu+B7n1aKu1sYQ/wmgNur7wU=,tag:xvthdFK6nQaLBbzy/Tki3A==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5MWplckhUTHE1Ym9yNVdp
+ MUdMY0kvVmRqTFk0b1BXbTljVCswT3Y2M2xVCjVjT3JMMWJWQWRBVENNVnlSbXNz
+ eTQ0czg5NDdXYUYrMy9kUC9OTnZCaDgKLS0tIEFmdEdEMkdYbXA3eURkQy9oclZs
+ MTdkclBla2RveGVtQzdLbG1UZmdWcE0Kc/YTjoHpHZEG/xP37UVdHgqYpbA8zdTz
+ oO5tI6DrveNvQQy22aQvmeUa2PoJrl7CbTDC7PXDBhFWOJF5FJtZ6g==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-02-19T11:22:44Z"
+ mac: ENC[AES256_GCM,data:ohg1VEP1CcdFQPa+qTSV4zLEXVrMQXKp9FWzpShinwK7qIsYhctqR3mNV9zbegR3HnCj47EijuD8NZiVPRQYsVblQzQI29AQohyfdhljO89UXdttl9pBmQMRD+zoWundRm/xzs559Lyo4TZomUdM59J7w5vEReRw8SBhytx0de0=,iv:H+/wiSFCVUzKiG569J0l7/JBYaoWxJNiUJNaiLa4354=,tag:9S7Bjdf3IQJljlwLn/xJUw==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -187,8 +223,8 @@ spec:
app.kubernetes.io/instance: capacitor
ingress:
- ports:
- - protocol: TCP
- port: 9000
+ - protocol: TCP
+ port: 9000
policyTypes:
- Ingress
sops:
@@ -199,15 +235,15 @@ sops:
age:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3TnovMHlmeG9xWkRuZ21P
- UTVtdzFpdzNDbGw5U0czNElmQ3B6cWEyMjNFCkJ6cTdRT1FkeGUzbjBpcHVqTmE0
- aFY0Ti8xK3VDWHhLbVNmWFUveTJjNlUKLS0tIHp1QkVFSVVRM1JxQWVyMWxwZGhs
- Z254c3ovZ2E4dFZJY3NOdjZHVlloWDAKJ8X1c0lG5lb7G9XgelErSabc9YB+ityN
- FRfnxNJlVpEDBR9aaI2+PMHjPFx4N84XRx9OHPl6VgwTmoFgwzOkUQ==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-02-19T10:48:23Z"
- mac: ENC[AES256_GCM,data:8YH3YEU1rQ8JIwGDPSgxDQNUZfgiUJeTgjLBWoaMzGTLfTBU1YFz0L8kBgIju4u5nIncROIK1kGxuTZSHMohnoGAmtQzDslXefnMh8a9IKvtkVSkcg1FY7M9edV28xMdFIx5QH9XI8db827lroLkfjWCiWzzWgKf/PbqlCiEpsU=,iv:Ms430aZThq79GgvyONkQu+B7n1aKu1sYQ/wmgNur7wU=,tag:xvthdFK6nQaLBbzy/Tki3A==,type:str]
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5MWplckhUTHE1Ym9yNVdp
+ MUdMY0kvVmRqTFk0b1BXbTljVCswT3Y2M2xVCjVjT3JMMWJWQWRBVENNVnlSbXNz
+ eTQ0czg5NDdXYUYrMy9kUC9OTnZCaDgKLS0tIEFmdEdEMkdYbXA3eURkQy9oclZs
+ MTdkclBla2RveGVtQzdLbG1UZmdWcE0Kc/YTjoHpHZEG/xP37UVdHgqYpbA8zdTz
+ oO5tI6DrveNvQQy22aQvmeUa2PoJrl7CbTDC7PXDBhFWOJF5FJtZ6g==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-02-19T11:22:44Z"
+ mac: ENC[AES256_GCM,data:ohg1VEP1CcdFQPa+qTSV4zLEXVrMQXKp9FWzpShinwK7qIsYhctqR3mNV9zbegR3HnCj47EijuD8NZiVPRQYsVblQzQI29AQohyfdhljO89UXdttl9pBmQMRD+zoWundRm/xzs559Lyo4TZomUdM59J7w5vEReRw8SBhytx0de0=,iv:H+/wiSFCVUzKiG569J0l7/JBYaoWxJNiUJNaiLa4354=,tag:9S7Bjdf3IQJljlwLn/xJUw==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
