cluster

commit 61c329bb44f138a594536a8db0882dec7a283729
parent aa36a00e985557d5abced1a4efba67ff968eaa5a
Author: MTRNord <mtrnord1@gmail.com>
Date:   Wed, 19 Mar 2025 14:15:11 +0100

Migrate osticket to HTTPRoute

Diffstat:
M
apps/base/osticket/release.yaml
 | 
61
++++++++++++++++++++++++++++++++++++++++++++++++++-----------

1 file changed, 50 insertions(+), 11 deletions(-)
diff --git a/apps/base/osticket/release.yaml b/apps/base/osticket/release.yaml
@@ -22,15 +22,15 @@ spec:
         ostEmail: support@midnightthoughts.space
         adminFirstName: MTR
         adminLastName: Nord
-        adminEmail: ENC[AES256_GCM,data:sVz2RqYTXS0z/jhdJUD+Slk0icozGIcS,iv:ASfV2kql5T3obrU7qG7iIp+I1pn2JiHpxYp9xSr5p4k=,tag:SlPgMBCohNYp7vchChZ5sQ==,type:str]
+        adminEmail: ENC[AES256_GCM,data:6pBqqI0SllylN8mdyOolnGbDLNN9YR+k,iv:iFqlOWV1T4hv6jNWgXEmCOuO0f+OhKUFXz+g4hFFfkw=,tag:Em9yLZnvqC7LJ8ghAJVzOw==,type:str]
         adminUserName: mtrnord
-        adminPassword: ENC[AES256_GCM,data:KLupCVH/WIwJ,iv:MNiItZscugvq0YXYl7QwxPuL9JVGNKP/9EPdomeewec=,tag:yKws4NQGuVyBYOlU0KL1NA==,type:str]
+        adminPassword: ENC[AES256_GCM,data:yt1OVUcJkmGp,iv:ad5k0Gqmm1Pe+vPcI5gEIhQtwVr1TJ10lT79rtTzLT8=,tag:a4V92ifHtZ6Ou+lMro427Q==,type:str]
         timezone: Europe/Berlin
         service:
             type: ClusterIP
             port: 80
         ingress:
-            enabled: true
+            enabled: false
             annotations:
                 external-dns.alpha.kubernetes.io/hostname: midnightthoughts.space
                 cert-manager.io/cluster-issuer: letsencrypt-dns
@@ -53,7 +53,46 @@ spec:
             auth:
                 database: osticket
                 username: osticket
-                password: ENC[AES256_GCM,data:PcCCft0g1dn6iOVOnWkrsmOTwJsXvKvQq2mzVpYo3lsUY2wfMwPs+KrT+URKEpbpyS2dqPb/8+Wf+yGOab1oiw==,iv:XyX/y9MC6ecIq8DGiAxtG5GzNaMyQFEmE2T+bc/xwnQ=,tag:jpnzAE8vtwYFmt/bjBeSPA==,type:str]
+                password: ENC[AES256_GCM,data:AGDniOW4zTNv7bcfqKOt+Ymwl1TSVYw1CrOnGei6zOp1aXN8E25c6CCSsiSM9FPWYFomS9d9hVpvKXuyu1g59Q==,iv:5yTtv8QOYEY6/Oj6FDVlB6EAjfX6GEi2KYDU75bqyEY=,tag:wcdGiXPstHan2XLGM3VfvQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCYW90TnFPNjNSVnh0VCtY
+            TWJpN2xkbzlmdUx3UGF3TDJJVTdId1F2Snk0CkkwYUtCb214RFZIVkJkc1U0dmRC
+            SmlFbE9iMVVSZTR6MVpVUGVyOUJhRWMKLS0tIEpjQm5ZRFZRUkJsTkxpSFRZS3Q3
+            b09aUEw4Q3pTczRUZGV3VUF4U2E5TkUKnSOXjlqDg9Pzo6b9UXRc9T/0LKqxG7D2
+            raQS1jDeX+l1FYLmq6hbCXEFou4zHRYYIWmZCYvNvl1524SMhNzdxA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-03-19T13:14:39Z"
+    mac: ENC[AES256_GCM,data:S0gv1Ad1S9GF4aXx2tOI02NUg5gUVabW+Bb06zrsMKQX3rT8XCFuSYCIUObT59xfRny0xSsbNBU0/7yHOkcR5gVogE1DdL3OIxj64DC/zFpLrHQ0WZHdYWDRGjaYvhFvGIvJfLJITKVc/mtqc58NHeG2wK1//dfF/phCyVQe/DY=,iv:nJb9L3B4cbbKZmF0HlT9h3Q0j265lEyKwc/l14OBnW0=,tag:I9nHCUlWgrmmEMAqcLES6w==,type:str]
+    pgp: []
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    version: 3.9.1
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+    name: osticket
+    namespace: osticket
+spec:
+    parentRefs:
+        - name: envoy-gateway
+          namespace: envoy-gateway
+    hostnames:
+        - osticket.midnightthoughts.space
+    rules:
+        - backendRefs:
+            - name: osticket
+              port: 80
+          timeouts:
+            request: 240s
+            backendRequest: 0s
 sops:
     kms: []
     gcp_kms: []
@@ -63,14 +102,14 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3RlhxaC81RXJBWERFeUFI
-            MzcvR3lSRnZqdm9kQndqZy9GV0hFQ1hWYVRRCmRoSTNKV0I2S1hqanhlNkxTTGVq
-            OXlDT3Vyd096TEJKYklhclhNZDNCQkkKLS0tIENneHlkckFRSWs3TVlwSnIxRzJt
-            WFR6TWUxOHQ0UUc4M280bXhCYlJxd2MKfOkNqCinE50o8buL0m+in8F0S/XLES89
-            i6uycRpEwA4B7fNX7zFyPSOQduh3lleWhnaesBfX6hjgLj163XSjEQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCYW90TnFPNjNSVnh0VCtY
+            TWJpN2xkbzlmdUx3UGF3TDJJVTdId1F2Snk0CkkwYUtCb214RFZIVkJkc1U0dmRC
+            SmlFbE9iMVVSZTR6MVpVUGVyOUJhRWMKLS0tIEpjQm5ZRFZRUkJsTkxpSFRZS3Q3
+            b09aUEw4Q3pTczRUZGV3VUF4U2E5TkUKnSOXjlqDg9Pzo6b9UXRc9T/0LKqxG7D2
+            raQS1jDeX+l1FYLmq6hbCXEFou4zHRYYIWmZCYvNvl1524SMhNzdxA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-01-07T23:45:48Z"
-    mac: ENC[AES256_GCM,data:H3+2+BCwv01NshsyuW8GWNxSCGHAnaBmUStNa4nl8BvNl7JMYrHQ/t5vooDV0MUSqg9+5H4kYWwxiTVh0UNy7lkP3X68YXo9TrhFAkKTYLlvBC1jUS7XaRwCFF8VDXS7E1m9uBJpeS1iW9JnF+jwYc4BuOikSxTQ3BQofqKcpKY=,iv:aw8rcT+ZARdu+wU7bDAeyHUAnMUacKL9ojNyEkqSzEU=,tag:eEF3UwhcitV7BrTfY5yPNA==,type:str]
+    lastmodified: "2025-03-19T13:14:39Z"
+    mac: ENC[AES256_GCM,data:S0gv1Ad1S9GF4aXx2tOI02NUg5gUVabW+Bb06zrsMKQX3rT8XCFuSYCIUObT59xfRny0xSsbNBU0/7yHOkcR5gVogE1DdL3OIxj64DC/zFpLrHQ0WZHdYWDRGjaYvhFvGIvJfLJITKVc/mtqc58NHeG2wK1//dfF/phCyVQe/DY=,iv:nJb9L3B4cbbKZmF0HlT9h3Q0j265lEyKwc/l14OBnW0=,tag:I9nHCUlWgrmmEMAqcLES6w==,type:str]
     pgp: []
     encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1