commit 5974fe011036cba8f3a86f77ec54e157d1cbf831 parent cab330c1a3fe87bc1ef83509ae08ee633aac9098 Author: MTRNord <MTRNord@users.noreply.github.com> Date: Thu, 4 Dec 2025 21:37:56 +0100 deploy ci Signed-off-by: MTRNord <MTRNord@users.noreply.github.com> Diffstat:
14 files changed, 308 insertions(+), 0 deletions(-)
diff --git a/apps/talos_cluster/concourse/concourse-secrets/concourse/encryption-key b/apps/talos_cluster/concourse/concourse-secrets/concourse/encryption-key @@ -0,0 +1,20 @@ +{ + "data": "ENC[AES256_GCM,data:+cNHZxPWZVloDhMe8H7ivzCnhFlnoAkNhWMuiXe519Q=,iv:MqGtTXnQxnjKVtPbMbwgEJ4vojtXZn4JMAxHKxtXmFw=,tag:o9e9KjzQrK7dafHvF3EQWA==,type:str]", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArdVNaQk9kZ1FjaUlvY3I1\nNVIrM0lYdTkrMGNaeDdVaFF5b2lITWhqNGkwCmJtNXpRaWpqSEZDdG9FSUhMckJ6\neXFjbWtzQzBENUVwcWNhaGh5eTQ3bWcKLS0tIGlEd1hza3FYLzgrelltZGRzUmRF\nMUs4L1NZeG5SNUtzK29UYmhWaGtkSHMKS0yKKeg4N7ypkrn8RxqoHmsozfYEu1iS\nlyxKDgikJnmEc1pmKgIywdgQ288Zj8pw0k52PxXPJvoEIdcuANx+cg==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-12-04T19:58:32Z", + "mac": "ENC[AES256_GCM,data:prV1hagblFa46WggH2MR5SLtGzZdJBPZrHD7gI2Zlbe6xRk5mLZlH5090dLv7hNhLAlR5bZOWpey2vu2yUsWcmpKJ62X0QRidafi4Sj2F8X4AmEIW7NUwnGpR5pX78K8iSb0h7orK0+CaeD1CjRwpQHi2xRUdaeUUb2CbXs67LA=,iv:FHBXTcmVaXL4Mz39exNBIjB/5x0ej29qtf9KD+57TlA=,tag:noloFzViLt293JUxDFZBdA==,type:str]", + "pgp": null, + "encrypted_regex": "^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$", + "version": "3.9.1" + } +} +\ No newline at end of file diff --git a/apps/talos_cluster/concourse/concourse-secrets/concourse/postgresql-password b/apps/talos_cluster/concourse/concourse-secrets/concourse/postgresql-password @@ -0,0 +1,20 @@ +{ + "data": "ENC[AES256_GCM,data:3cSFbkTZgMcySmyYOK4zVAnyrjBw4+UWclaE2zjdp+RLvtjjABeGBBtui+s0u+LdQY18QZAL9k8OInxOljqd918=,iv:buX1DL1eBI/6Yt+4r9Qkxk0Nj85DdYzLn5V6FAcA9nY=,tag:BGkKHWSETpByg7N4iN7vKw==,type:str]", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrY0s3cC9RMDllUmdlMW9u\nMGRXeUlWME5lL05LZmJ0dUl5bGR3Z0tKUzAwCjhLVERJRUZnN0dBTUVVdmdTRStj\ncGZhdERvUW4rcFI5MnBaN1EzOEJiZjgKLS0tIE5hS1ZXZHB0NjBIbHJUZi9BUFp3\nMjkyNUhoYnBIM0o4OERhNkxMMzdiV1UKaujToL9XgpQv5NKP7Bj+4SWWXcvJIlOy\nPeXGcjkNuDucl1srbKo2RcZF6LHHR+hr4NT+wOtA2hKY2EZqxenVbA==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-12-04T19:58:35Z", + "mac": "ENC[AES256_GCM,data:1w0ZAsyO3JU9nt8f1bCuEGVCIbmKzhtkBI4XQnw5CpRXgSFC5pmUsLlSFmZWk/K7vBoLK59Ad0MXSmcyp6AR1iUOkGzDdE6/5yB/VO2YpKdIB7ZZE6Nz6+g3u2wi1LGlDzjHiHs6ATFBOi/oexxD2sp6VdxoKcKpgfZkhVh1L1o=,iv:nrOAsuBpX/sDLLz0xshzxI+hbxJB/OnzIhHRS2+rPo4=,tag:rD/6E3VX7m2ffx+r4ujHgA==,type:str]", + "pgp": null, + "encrypted_regex": "^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$", + "version": "3.9.1" + } +} +\ No newline at end of file diff --git a/apps/talos_cluster/concourse/concourse-secrets/concourse/postgresql-user b/apps/talos_cluster/concourse/concourse-secrets/concourse/postgresql-user @@ -0,0 +1,20 @@ +{ + "data": "ENC[AES256_GCM,data:40vW0MaGNBim,iv:IjruAYQSTioC9tigD9nHONSdysPdtBmuwKEc+kAZ/tY=,tag:eKKDCQ0ltHZbM89ANFkJmg==,type:str]", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSejVHNWZraEUza0dFYldL\nYUlBYng2cnNFWUFSdEhIdFBwUkRaRVpqQldvClFTTXQxb09vVW1Hdlk4YXk1N0Y4\ndGVyOHNHVUFQWFRaeGEzM1ArUjMvK3MKLS0tIG5vcVNlaitFWHppRmZFc2tacVd4\nUnhaMWVzaG0xcUVncmczUCtKVzE2eTAKXreMrMrstCLi+ZMgnd45ox68RylHNfyu\nct5BU+Mnp3jSNtoYvPipcvutN/WDQbXKm5Le0qkn8EwQ4d14jRm5OQ==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-12-04T19:58:38Z", + "mac": "ENC[AES256_GCM,data:SjtcdI0eGn8EArZ1pXvv30EKYNzIaPd1mz811A4wvtZZaCAVK3REmbSEC7DmW0hv2Q70qJl2n74/ef+0ao1KTMt+a35cAhA4R5I4XqGtPYbnMifxRVxHP3PQ5NNCBtWYJquRd7V9PXALaGQO3PcPgYsAfjxxmgEf3J2zGopTZdo=,iv:OG0u81xmPl69x4pjD8IF2RHiugF4ZncYWcGso/6qzMI=,tag:hzaZlZPRH3oReTfxlAjNBg==,type:str]", + "pgp": null, + "encrypted_regex": "^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$", + "version": "3.9.1" + } +} +\ No newline at end of file diff --git a/apps/talos_cluster/concourse/concourse-secrets/web/host-key b/apps/talos_cluster/concourse/concourse-secrets/web/host-key @@ -0,0 +1,20 @@ +{ + "data": "ENC[AES256_GCM,data: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,iv:SQ6XJncZHZtf+TB55fFS8v5ePrq26pvHDoQoqRknhJc=,tag:2ZubodbKCypVLqWeNUmrrw==,type:str]", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsTXFkWmpPMGh2YVRIY2VN\nL2cwN0ovNkVnc0ZWd2dSMkEvaFFyZnpXdENVCkV2b3V3eEc2ck5EeDc1NXpPM1pr\nSi9DQ3pRSGRwbmx2NTZJRTI4UVBhc0EKLS0tIGxzK1N3UkpRb0JWbWZMSEZSRGc1\nK3NpWjMvQmNja2Q4bXRmZjlQVTB6NnMKrYVXBqG+mpwxnYzBoLVh+Wv4X3DxVZJq\nVfiJZ4No88lGBgY2aiHG0TJBRcLuVOaJb0g6orIky3cjlcqEYOMkcQ==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-12-04T19:58:42Z", + "mac": "ENC[AES256_GCM,data:WDqQVICxpMzQd3OHnGpo1TYdoKu0h3QapvtoCPQgEUZwJZRa3iGZe/jNazhd/JApmG18VZ/9RPyNLFzGccIpJEoCnIRUmXg+vZodFzRJO78brewbCwby9V+OJaZZ1jI4z9yqa5y0/QdZjamAxZELOAnHrQJ355V8KVz3K64A0WE=,iv:cEYKCdi/a3nuPG+1Yndgcty5i/+mSBfMctrnjzz1mys=,tag:Kj//oRtCFI5kcm4Ij84J3g==,type:str]", + "pgp": null, + "encrypted_regex": "^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$", + "version": "3.9.1" + } +} +\ No newline at end of file diff --git a/apps/talos_cluster/concourse/concourse-secrets/web/local-users b/apps/talos_cluster/concourse/concourse-secrets/web/local-users @@ -0,0 +1,20 @@ +{ + "data": "ENC[AES256_GCM,data:XERDQSGb+s5gFcVrDPgJBv19pvLcfMf0oR4SEBDeYjha+FePpKxEENzZ,iv:TCphdKWdo63Iv2EsRAi65uR1SD88sKHGmVbg9kWu2ZU=,tag:NL5TucrPUeNNNkPeGYWZxA==,type:str]", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYS1BSaW4zaCswRzNKbGhl\nd2ZvTEkzd0pJaEx3R2JPWWFJb1hRUnJpTFJ3CnZoTlJ0am44Vzk3Z1B6NlQzOTZN\nMTY3ZWtxNXBKVWJaeUFJMzdBd25EaHMKLS0tIGxVRC8yNXgxblhwbzRMbUdtYlVO\nZnF4aDdXL0FSaGdBZ25TcDhXcVkxTTQKym58JOECyzsqakp7PTMYvNEgBnwMNnyV\nqfAP/1rH0fUZ1FCVZrstqvIi+uF2LO+azDzsQlOfNMHRd40XqiqM/w==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-12-04T19:58:44Z", + "mac": "ENC[AES256_GCM,data:5EAiCeHYhPQe0B76cHQ/sVRUmIJ2/+Uqn0cnpIlB2X0vusdKlt+6QzVxGG1usY8P8zFv3RT4z1wbsz5yzp1BMLum5jC91kFqvjoXp3yY23GFYBHMhA6LZ2b1o6rB+abbRK5gTP+k7KrPNHy5wuR9Abu5rNWJIVwdQbuZeTylMMk=,iv:UGyRIZUJcKMqde8Zi963ik5ZF6LKpdYhn6mrgfn3BFQ=,tag:mmzbO0EQPwc+6UHX/JiIBg==,type:str]", + "pgp": null, + "encrypted_regex": "^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$", + "version": "3.9.1" + } +} +\ No newline at end of file diff --git a/apps/talos_cluster/concourse/concourse-secrets/web/session-signing-key b/apps/talos_cluster/concourse/concourse-secrets/web/session-signing-key @@ -0,0 +1,20 @@ +{ + "data": "ENC[AES256_GCM,data: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,iv:4MfBjNYzHh2xVIVUDuvadMK5mcLuxHEIH0jznteGjMg=,tag:j8QtZ6E7KTykWq2GcVDGSQ==,type:str]", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1R0s4WVl4a3E5VUZ6UjRa\naHNmVkpUTkpnTE5TRm9XN1ZNYXNkUS9CekZNClliUTVhWENXVURvZENZYzBwWSsr\nK1lQUWNzdnZZQXlqRTVhUE5ZVVFWWlkKLS0tIEtWMENsYUY2RmdHSTdOZyt1dUN1\nZGVHT0Rld2M4d1RJWXRHSXJPd2Fpdm8KpkJfXNeV0Qcl4b6s6jRcWfEmHThEFKwX\nFgVCMafzodIvN1DRytkOcvZTJgO3J87J7T4sFkx10TPcC7kO6FyAfA==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-12-04T19:58:47Z", + "mac": "ENC[AES256_GCM,data:s/Sw0c0lHeeofNTLDiUb1p/uQ4769yo5tizEDWuNrB1VWye2wY7Q6nPKcb73vwVy+hWLstOlllQPC52NxUdzZw9YrgYS6IBvjPVb0Ekxg20e1Qy6mP2wR2F19HOC/ouH1liJxCqZMq81mp1Rim8THa4V+4YjvOf9U0gWFiJH824=,iv:FWMeUUvHkqZYFQ17dFM9n2nKbhYCvizt7DG95GN9bhA=,tag:23ALaIUkY6DoQuumK9I7PQ==,type:str]", + "pgp": null, + "encrypted_regex": "^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$", + "version": "3.9.1" + } +} +\ No newline at end of file diff --git a/apps/talos_cluster/concourse/concourse-secrets/web/worker-key-pub b/apps/talos_cluster/concourse/concourse-secrets/web/worker-key-pub @@ -0,0 +1,20 @@ +{ + "data": "ENC[AES256_GCM,data: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,iv:n5pygYL8hVPigCEfagiUcffYdm5Vl71bg0L8MslOxcQ=,tag:j3TNA8UIBmXR3BtkUlLhUA==,type:str]", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBydjgyR1lsSlVXeVQwNmRE\nVGplcFc3L2MvbnN5bFBaTUpHUVdnWndTZjFzClFmdDhYcVdnMU8vR0FFSmVNTWRR\nOHMzYXpMbHcwTmgwTWdmMzFGeFZvMzAKLS0tIFpwUGM4dE1jSVluVVRCSkZZYXgz\nYzBUNE94aXRxRnllT2grQm12QmxwU2MK4JNA7RylgXM6aZFw7ACCuCQ3qUnKyU4a\npTZ4BiewJCTGA5v67otWUtK7DHnvP05NQ7vONMNhxgAwgVHuofLXZw==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-12-04T19:58:50Z", + "mac": "ENC[AES256_GCM,data:d+d86jJlajTEShKF1pD368rAhk5TmNT2zaOzJEr1bQGoLIEvZG2sE1YiHowoKhdscrgD/2KUAifZQd9ui3L1ktUFsyBptys2BqkDEBgdLtE+UOQ6iQUlto+a8kJlCVoGclo0LbNzV6Rdu4QFFSCc/kSCw8WGSBox8PfzpHcttJM=,iv:Hx5PGvW1VhXR5Vl94k1Bckn43EGiL9Vu3bTAfE6jgrk=,tag:QWcUpytDd9oW9ATV1UjtpA==,type:str]", + "pgp": null, + "encrypted_regex": "^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$", + "version": "3.9.1" + } +} +\ No newline at end of file diff --git a/apps/talos_cluster/concourse/concourse-secrets/worker/host-key-pub b/apps/talos_cluster/concourse/concourse-secrets/worker/host-key-pub @@ -0,0 +1,20 @@ +{ + "data": "ENC[AES256_GCM,data:wyy2XEWcmPbfkeW3IL+Fr8IKMaJIlI5dH07sVNyaotDbycPwiw+jtUrw76bU1+dOtOPCd2IZ2v2HaHKHebZlxWzbqyX8pC/+NbOONEAYb0J0Mgjr2D9zBZF0P8WDBeKd/3NNYh4aXNIOBkvaqsCYiU49bA5J0z5OuLOcGpRERbgr0tlpzkYBoloaWv0djVFsWAaQtsHZO1afp2yoU4TkGbrlyrZBfioeTiSd15Ihi/bPRf4pas+XybAmgGzvitEdRdjBHx7ZiIepcgpQeYp8fmwLetIOqve5w0d7oFBUEUOPvPNxdRRsJkNw6ixbuUYSk/sCSgf5b00KzGuYzHLf9vcmkxHoqvUj5TZ2LDB4SrLSuWHIO5POMz64oRkNI9E0gCg7W2rc1LF0CEyDv5l/bFFswdM1OkdiNZnM25MJbpAjVTVKvhGwfdRX0dbDQjqvx4waIB6b0f9UeSMyWe5lcowwMddlaiPj31sHrWRct1MbsmFJw0O7X7fzpahq8ClB2RhOEd5mf4lGCcu09Fpd+wkC57HKCnJ0ccS0itGa6FewQAQIJA4PrHRg/7lbr1gP7RD0Ea3pNAjJm8elPGgjJ24mSWtzTB6NxcbTAJo+cDgDZ1MnA31817ZjKGdhRAY6EDKE+hD/wW9CT8MDnc7t1LBZAwDMCi4CSDXZf1ZPNWFWlnHxi1S1m0AcoC+bqRD0hisRqBOl7VOPnUdoNx2EZerwnCyAFaDLBRRdvLNhbPSOz0JbJkfWeD3II93zhQ==,iv:pclZENO1o3PFpDGl2SH8Ap57yYgcXUMjtlN/nVgdELY=,tag:npOnCAyzJ09anxX8dV1liQ==,type:str]", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWN0Jxa1BlSlYwN25hRkZx\nWktQSG9tRTYzVHpPZy9NaUYxdm5JaUhvVFZNCjMrZnd6TDFUc1RoczJqeVMySVlF\nMFhDbGl6eGtZcG5PSWw5aUhWa05NZXMKLS0tIGFsdjVRaFQ4SHVUL1BKYXFtZldF\nR1J4eDk5WDA1MXdVbnQ5SWFXd2tTMEUKj9sfPrQMzHIr5vwVbI+Zd11HvOcuFfZB\n+UZe7bPYlp1OmgIXRux37+14QFIvxngX0aN1C+0Q8JZSuOGLKYS6XA==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-12-04T19:58:54Z", + "mac": "ENC[AES256_GCM,data:XA21hMlGaK21Pm+km7N2ELC9qBmX5xSkzcr3Byf6gqOIsBVAqJIMA3sshGoTE08rVT8aCNMa2oUT0cpD0QhbeZG7T1TgLBKd2XbSDaSjx258SgvyvRVAxe1bPxiq55/r0JL+ORJlUa9fxfePfQDhGaJ/knUeVWWrs8eM2CJPZXE=,iv:Xi7Oa95hTsuLzE4qGl7Q2jWW6c6UCWCK6LA34R8bA14=,tag:o2yPVPLPAKNM7XnsJNApbQ==,type:str]", + "pgp": null, + "encrypted_regex": "^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$", + "version": "3.9.1" + } +} +\ No newline at end of file diff --git a/apps/talos_cluster/concourse/concourse-secrets/worker/worker-key b/apps/talos_cluster/concourse/concourse-secrets/worker/worker-key @@ -0,0 +1,20 @@ +{ + "data": "ENC[AES256_GCM,data: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,iv:eeaUvpJGnu6svWrWfM1g2xmEZkwmt/lGhT3wC88Hu8g=,tag:E/E9PNE6hfXA+SZgL08y/g==,type:str]", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSUzd2U0JIT2cvT2w0c0hV\nVVM0OXNNUFdUMHRpWkMwVXhzemhLMnJxd1VjCm0reERnQU83VVVRYkZ4ZXZzenQ3\nV3FmWjBHc1RJemVhdSt2a0RPVk1remcKLS0tIHFKdWU4MitLdjJqTlcwOEp1eVdK\nKzVRc01Pdzc3bDFZYkNJZmdseDZlcjAK47hvGtOrpXTbOFJ95/mmjj4Ee2Yi0uVe\nLKihrQPwI3LQNe1FEyS7PVVTe0VN86k5eEsVEQb3Cvn7IUrJonrROw==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-12-04T19:58:56Z", + "mac": "ENC[AES256_GCM,data:0MjoRJx3nenoXQiRlL3LifQ4NrOjgMJAkF+Rsh81WjFByvCIN02DUaEE9Gowvge0o+ULJEFomBe0jyJfXD4S9b7h0/DF/Ohiwh3QT8H2Ia2FZYURKlTimmFeypD28o8gYbkw9zqIDtyI8FQFCgNEDUEB/izJvdlq4skKdJ2Npm8=,iv:YlBsphn014XJktgnMdzVDwL1M0cPjKJHC+VOoid9B0s=,tag:bbrYwpBiowOFQf/mJD8p1w==,type:str]", + "pgp": null, + "encrypted_regex": "^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$", + "version": "3.9.1" + } +} +\ No newline at end of file diff --git a/apps/talos_cluster/concourse/concourse-secrets/worker/worker-key-pub b/apps/talos_cluster/concourse/concourse-secrets/worker/worker-key-pub @@ -0,0 +1,20 @@ +{ + "data": "ENC[AES256_GCM,data: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,iv:mhUFDdZXfNVUeFHJ4ZXX0yTvAj/Jv1fV7So8g5/ijUE=,tag:9GpxrdH3oEhWGnESrPGOdw==,type:str]", + "sops": { + "kms": null, + "gcp_kms": null, + "azure_kv": null, + "hc_vault": null, + "age": [ + { + "recipient": "age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh", + "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLRlk5Z2ZvSXE2TVVRVEpk\nbzVIa2RadjROaFY0SUZLZWVEMVJHUkE0bkNZCjNQRjhZS0lGRk93UTBMYmg3Zi9o\naG5qT1ViQUdTdHhIQ0RxWHZIRnVVZGsKLS0tIEVjOHRWd2dkR1c2Mk5mZE9aTVpa\nOVlsYm9EWUU1M1BYMXVEMDlDWWlKSmMKL2D6Ol6fXqM3rOUX2865Bp3b4iO21UcO\nF+VmBNm6tMFYPMVloOUw8bJZUTF3qDa9kkvhw9KqD96C6XxFuo+Hrg==\n-----END AGE ENCRYPTED FILE-----\n" + } + ], + "lastmodified": "2025-12-04T19:58:58Z", + "mac": "ENC[AES256_GCM,data:0/qQAtMiy2I8W67QbbXvbkyl1ddwskOTI0P7AWoggF2wnRKXd9fs8a6f5K0cHSdMd2zrsRPpKLu1WJxQkaOS5snkMNXv4Nk9/nMgukYPqRVaqmVp26ljRY5yGVvnXeu0cSLm9BG87Qb+LU9OX2M6qUEHYtLdU2bc1X7TC7H7Ibw=,iv:fwhwBwsbbz5OtzXAj709Gy3XIcp/pCpCBDBVRxB9/CM=,tag:hgiwesaICYyCzEzqOzMqCw==,type:str]", + "pgp": null, + "encrypted_regex": "^(harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$", + "version": "3.9.1" + } +} +\ No newline at end of file diff --git a/apps/talos_cluster/concourse/kustomization.yaml b/apps/talos_cluster/concourse/kustomization.yaml @@ -0,0 +1,6 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: ci +resources: + - repository.yaml + - release.yaml +\ No newline at end of file diff --git a/apps/talos_cluster/concourse/release.yaml b/apps/talos_cluster/concourse/release.yaml @@ -0,0 +1,71 @@ +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: concourse + namespace: ci +spec: + releaseName: concourse + chart: + spec: + version: 19.0.3 + chart: concourse + sourceRef: + kind: HelmRepository + name: concourse + interval: 50m + install: + remediation: + retries: 3 + values: + concourse: + web: + externalUrl: https://ci.git.midnightthoughts.space + local_auth: + enabled: true + clusterName: MTRNords CI + postgres: + host: pg-cluster-v2-rw.postgres-cluster.svc.cluster.local + database: concourse + sslmode: require + kubernetes: + namespacePrefix: concourse- + auth: + mainTeam: + config: | + roles: + - name: owner + oidc: + users: ["MTRNord"] + localUser: "concourse" + oidc: + enabled: true + displayName: "Midnightthoughts SSO" + issuer: https://auth.midnightthoughts.space/application/o/concourse/.well-known/openid-configuration + userNameKey: preferred_username + groupsKey: groups + skipEmailVerifiedValidation: true + secrets: + create: false + persistence: + enabled: true + storageClass: longhorn + accessMode: ReadWriteOnce + size: 10Gi + postgresql: + enabled: false +--- +apiVersion: gateway.networking.k8s.io/v1 +kind: HTTPRoute +metadata: + name: concourse + namespace: ci +spec: + parentRefs: + - name: envoy-gateway + namespace: envoy-gateway + hostnames: + - ci.git.midnightthoughts.space + rules: + - backendRefs: + - name: concourse-web + port: 8080 diff --git a/apps/talos_cluster/concourse/repository.yaml b/apps/talos_cluster/concourse/repository.yaml @@ -0,0 +1,8 @@ +apiVersion: source.toolkit.fluxcd.io/v1 +kind: HelmRepository +metadata: + name: concourse + namespace: concourse +spec: + interval: 5m + url: https://concourse-charts.storage.googleapis.com/ diff --git a/apps/talos_cluster/envoy-gateway/gateway_settings.yaml b/apps/talos_cluster/envoy-gateway/gateway_settings.yaml @@ -485,6 +485,18 @@ spec: certificateRefs: - kind: Secret name: git.midnightthoughts.space + - name: https-midnightthoughts-git-ci + protocol: HTTPS + hostname: "ci.git.midnightthoughts.space" + port: 443 + allowedRoutes: + namespaces: + from: "All" + tls: + mode: Terminate + certificateRefs: + - kind: Secret + name: ci.git.midnightthoughts.space - name: https-midnightthoughts-plausible protocol: HTTPS hostname: "plausible.midnightthoughts.space"