commit 677b0b80c010d5a463d5a5b23f072b52d677635d
parent aee22f9b44d95aab7b5d6e07936fbf66b4f17021
Author: MTRNord <mtrnord1@gmail.com>
Date: Wed, 19 Mar 2025 12:06:10 +0100
Migrate bugzilla to httproute
Diffstat:
3 files changed, 101 insertions(+), 100 deletions(-)
diff --git a/apps/base/actualbudget-server/release.yaml b/apps/base/actualbudget-server/release.yaml
@@ -1,4 +1,3 @@
----
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
@@ -33,45 +32,44 @@ spec:
image: ghcr.io/actualbudget/actual:25.3.1
imagePullPolicy: IfNotPresent
resources:
- limits:
- cpu: 100m
- memory: 128Mi
- requests:
- cpu: 100m
- memory: 128Mi
+ limits:
+ cpu: 100m
+ memory: 128Mi
+ requests:
+ cpu: 100m
+ memory: 128Mi
env:
- - name: NODE_ENV
- value: "production"
+ - name: NODE_ENV
+ value: "production"
# - name: DEBUG
# value: "*"
ports:
- - containerPort: 5006
+ - containerPort: 5006
livenessProbe:
- httpGet:
- path: /
- port: 5006
- initialDelaySeconds: 30
- periodSeconds: 10
- timeoutSeconds: 5
- successThreshold: 1
- failureThreshold: 3
+ httpGet:
+ path: /
+ port: 5006
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ timeoutSeconds: 5
+ successThreshold: 1
+ failureThreshold: 3
readinessProbe:
- httpGet:
- path: /
- port: 5006
- initialDelaySeconds: 30
- periodSeconds: 10
- timeoutSeconds: 5
- successThreshold: 1
- failureThreshold: 3
+ httpGet:
+ path: /
+ port: 5006
+ initialDelaySeconds: 30
+ periodSeconds: 10
+ timeoutSeconds: 5
+ successThreshold: 1
+ failureThreshold: 3
volumeMounts:
- - name: actualbudget-server
- mountPath: /data
+ - name: actualbudget-server
+ mountPath: /data
volumes:
- name: actualbudget-server
persistentVolumeClaim:
- claimName: actualbudget-server
-
+ claimName: actualbudget-server
---
apiVersion: v1
kind: Service
@@ -99,8 +97,8 @@ spec:
- budget.midnightthoughts.space
rules:
- backendRefs:
- - name: actualbudget-server-service
- port: 5006
+ - name: actualbudget-server-service
+ port: 5006
timeouts:
- request: 240s
- backendRequest: 0s
+ request: 240s
+ backendRequest: 0s
diff --git a/apps/base/bugzilla/deployment.yaml b/apps/base/bugzilla/deployment.yaml
@@ -76,7 +76,7 @@ spec:
valueFrom:
secretKeyRef:
name: bugzilla
- key: ENC[AES256_GCM,data:xqkSw73eciMwjoEhr7D87w==,iv:Sr5kcDdVJ6WVOAsbdmVQFs1I00tYjSQYyQ9kS/pCm8M=,tag:S1B9kajAuKOoPpzn643mrQ==,type:str]
+ key: ENC[AES256_GCM,data:3aqfjeAQ5ytLYt5Rk7ZuNQ==,iv:GxN0ge9DjaKzikbkGGiWab8zvNEGfhZrU5FC0GO9cNE=,tag:bliPrLDTYS0xEA+3dbLgKw==,type:str]
#- name: BMO_inbound_proxies
# value: "*"
- name: BMO_memcached_servers
@@ -111,16 +111,16 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGUDFZalJ5V2M4M3dFSFIr
- b0tQdlpFNzFzUld0Q3dkTWtoeUUzcE5IMm13CklhcnVUV1VDTURyYUNTR2FsQkMr
- VC9YVWhYWjF6cjVpSVpSYjh2TDlBUG8KLS0tIHhwbmQ1TG51QU5NMUREMFNRUG9E
- S1dmTGc0LzMzM2x2bFE3VDZ0YmsrMTAKT8l9nDJSQgEd+0xJHnDBmhUYHFjGz+1N
- mNvVD6cN6VDApslkmACFKl4Kb+f0+gKzUfny5GKMxCjc/BH0oYF0YA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ2RXS08xbi9hR2tLSVM5
+ eE5ITWdzMnozS0NMTjVkczNGSnd5UCtQZFdnCi9JZEZpSHAxdGtRLzZpVVhQWWp0
+ RGJOczNXVGVmYXdQN2M4V3BiYTRINUkKLS0tIFdXaC9IcDhyU2kxN0xLdlhHNFBl
+ MGF4bVk5OHRMTE1pZ1MxeXZvaEpvVUkKfXqsjq5cR9Cobw2YjdKJSRDGyEJqpFDF
+ y9AW29DvZ/oxbW/vgtoiruPZZd0ttQSpovX+wbc5mCH4A949ckqpBA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2024-11-23T00:40:19Z"
- mac: ENC[AES256_GCM,data:dIO5BTxj2d8wB9r9cjcSaIz28noyt19EWjzkgUYj0h/J3HIjscw95PLcDFdZ6/XFoIeN/I4hP9OeGBV+nWmCOJf6Yk0Y/VT1Zw6XKIPeAxzhPOcc0fXM4dyXegO1gUQDA3bzWZTVlKbB9InrDJNkJziHFZOLGvcYLTQ6iJrE4j8=,iv:P+NZJ4f7f+4fTEFFAykgYO58UCaD8DcVERqXADrUeoQ=,tag:jwz60APs0YflMtGfrSb32w==,type:str]
+ lastmodified: "2025-03-19T11:05:16Z"
+ mac: ENC[AES256_GCM,data:pHExX678QDJzYm+I8dyc9T2Kq+DLktVXGAvLWPqjvxRObL90Z/FpkEzb9EFS6dNvnWifrASsUqhDf7uXJU+R7y3KlgOxtSNGGQ+8VJ9nkfxxNaFdRwYXBKq+WqkZ5DfWfIIwdUN/K5eSUXx5Se+4MzokMWUhEdhO+dFSzERYFY4=,iv:7feVIvrTZAWskPPDQ5F6QxfJC+YNZY3R66fmenxnnts=,tag:RUgblvhjMr6NGelMiVyiNw==,type:str]
pgp: []
- encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
---
apiVersion: v1
@@ -147,16 +147,16 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGUDFZalJ5V2M4M3dFSFIr
- b0tQdlpFNzFzUld0Q3dkTWtoeUUzcE5IMm13CklhcnVUV1VDTURyYUNTR2FsQkMr
- VC9YVWhYWjF6cjVpSVpSYjh2TDlBUG8KLS0tIHhwbmQ1TG51QU5NMUREMFNRUG9E
- S1dmTGc0LzMzM2x2bFE3VDZ0YmsrMTAKT8l9nDJSQgEd+0xJHnDBmhUYHFjGz+1N
- mNvVD6cN6VDApslkmACFKl4Kb+f0+gKzUfny5GKMxCjc/BH0oYF0YA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ2RXS08xbi9hR2tLSVM5
+ eE5ITWdzMnozS0NMTjVkczNGSnd5UCtQZFdnCi9JZEZpSHAxdGtRLzZpVVhQWWp0
+ RGJOczNXVGVmYXdQN2M4V3BiYTRINUkKLS0tIFdXaC9IcDhyU2kxN0xLdlhHNFBl
+ MGF4bVk5OHRMTE1pZ1MxeXZvaEpvVUkKfXqsjq5cR9Cobw2YjdKJSRDGyEJqpFDF
+ y9AW29DvZ/oxbW/vgtoiruPZZd0ttQSpovX+wbc5mCH4A949ckqpBA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2024-11-23T00:40:19Z"
- mac: ENC[AES256_GCM,data:dIO5BTxj2d8wB9r9cjcSaIz28noyt19EWjzkgUYj0h/J3HIjscw95PLcDFdZ6/XFoIeN/I4hP9OeGBV+nWmCOJf6Yk0Y/VT1Zw6XKIPeAxzhPOcc0fXM4dyXegO1gUQDA3bzWZTVlKbB9InrDJNkJziHFZOLGvcYLTQ6iJrE4j8=,iv:P+NZJ4f7f+4fTEFFAykgYO58UCaD8DcVERqXADrUeoQ=,tag:jwz60APs0YflMtGfrSb32w==,type:str]
+ lastmodified: "2025-03-19T11:05:16Z"
+ mac: ENC[AES256_GCM,data:pHExX678QDJzYm+I8dyc9T2Kq+DLktVXGAvLWPqjvxRObL90Z/FpkEzb9EFS6dNvnWifrASsUqhDf7uXJU+R7y3KlgOxtSNGGQ+8VJ9nkfxxNaFdRwYXBKq+WqkZ5DfWfIIwdUN/K5eSUXx5Se+4MzokMWUhEdhO+dFSzERYFY4=,iv:7feVIvrTZAWskPPDQ5F6QxfJC+YNZY3R66fmenxnnts=,tag:RUgblvhjMr6NGelMiVyiNw==,type:str]
pgp: []
- encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
---
apiVersion: v1
@@ -178,16 +178,16 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGUDFZalJ5V2M4M3dFSFIr
- b0tQdlpFNzFzUld0Q3dkTWtoeUUzcE5IMm13CklhcnVUV1VDTURyYUNTR2FsQkMr
- VC9YVWhYWjF6cjVpSVpSYjh2TDlBUG8KLS0tIHhwbmQ1TG51QU5NMUREMFNRUG9E
- S1dmTGc0LzMzM2x2bFE3VDZ0YmsrMTAKT8l9nDJSQgEd+0xJHnDBmhUYHFjGz+1N
- mNvVD6cN6VDApslkmACFKl4Kb+f0+gKzUfny5GKMxCjc/BH0oYF0YA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ2RXS08xbi9hR2tLSVM5
+ eE5ITWdzMnozS0NMTjVkczNGSnd5UCtQZFdnCi9JZEZpSHAxdGtRLzZpVVhQWWp0
+ RGJOczNXVGVmYXdQN2M4V3BiYTRINUkKLS0tIFdXaC9IcDhyU2kxN0xLdlhHNFBl
+ MGF4bVk5OHRMTE1pZ1MxeXZvaEpvVUkKfXqsjq5cR9Cobw2YjdKJSRDGyEJqpFDF
+ y9AW29DvZ/oxbW/vgtoiruPZZd0ttQSpovX+wbc5mCH4A949ckqpBA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2024-11-23T00:40:19Z"
- mac: ENC[AES256_GCM,data:dIO5BTxj2d8wB9r9cjcSaIz28noyt19EWjzkgUYj0h/J3HIjscw95PLcDFdZ6/XFoIeN/I4hP9OeGBV+nWmCOJf6Yk0Y/VT1Zw6XKIPeAxzhPOcc0fXM4dyXegO1gUQDA3bzWZTVlKbB9InrDJNkJziHFZOLGvcYLTQ6iJrE4j8=,iv:P+NZJ4f7f+4fTEFFAykgYO58UCaD8DcVERqXADrUeoQ=,tag:jwz60APs0YflMtGfrSb32w==,type:str]
+ lastmodified: "2025-03-19T11:05:16Z"
+ mac: ENC[AES256_GCM,data:pHExX678QDJzYm+I8dyc9T2Kq+DLktVXGAvLWPqjvxRObL90Z/FpkEzb9EFS6dNvnWifrASsUqhDf7uXJU+R7y3KlgOxtSNGGQ+8VJ9nkfxxNaFdRwYXBKq+WqkZ5DfWfIIwdUN/K5eSUXx5Se+4MzokMWUhEdhO+dFSzERYFY4=,iv:7feVIvrTZAWskPPDQ5F6QxfJC+YNZY3R66fmenxnnts=,tag:RUgblvhjMr6NGelMiVyiNw==,type:str]
pgp: []
- encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
---
apiVersion: v1
@@ -196,8 +196,8 @@ metadata:
name: bugzilla
type: Opaque
stringData:
- password: ENC[AES256_GCM,data:ucni3BvTIIbPPInt6E728iiQsrOnPZOXUXlS6Al0nLWKhdzgqvTGVQKj4PbtGkd7kDidgj82h1aI9BNcgnY0AQ==,iv:GPZ5l3f7Yw7KAeyX0HciL6esVKiLsSYl3hJDg0vGBds=,tag:17ZJ8grrVGPgznTwD3OtGA==,type:str]
- site_wide_secret: ENC[AES256_GCM,data:nk37Mg2ZMyj4rFZJRabj4wC0Hppff1eCNznxTNymSVUT303Xoar205ndtHdQgboaVjyPWZh5kUtgJlhFJ9lHvg==,iv:fFVtXlPFw3m72JWNiX66lU2vOX+pvdmDr45GZ6ssdIY=,tag:PKQqSwldxWJHhPkdx/K+PQ==,type:str]
+ password: ENC[AES256_GCM,data:lbBrG5+z66XvO7vzlutk7nv8bfhTneSAUokIQglNRhnuyjiE8Rdao+CnH8J6dWbW7uEbKa5fvC+Q2PFzdoGvMw==,iv:LJCekt+znJH8OkS6876BcvvFH3F5NtSaZSsilbR6rls=,tag:oP0MIS8nL3/qIlOP6gPszA==,type:str]
+ site_wide_secret: ENC[AES256_GCM,data:2Owfp+QiTio7IgdR0GSO18lImHKeZuMqUa/ove4yeHP4d3EF9R9zWN9BykLi2BwqpXnPVuzBiRx0ZHEjmQyfIw==,iv:J5RC3PtYJcmpxmCMIy83Z7VrpEk8SbeAPSaDO/dYqfI=,tag:GABM1rly3+kWvM2l7iROnw==,type:str]
sops:
kms: []
gcp_kms: []
@@ -207,45 +207,36 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGUDFZalJ5V2M4M3dFSFIr
- b0tQdlpFNzFzUld0Q3dkTWtoeUUzcE5IMm13CklhcnVUV1VDTURyYUNTR2FsQkMr
- VC9YVWhYWjF6cjVpSVpSYjh2TDlBUG8KLS0tIHhwbmQ1TG51QU5NMUREMFNRUG9E
- S1dmTGc0LzMzM2x2bFE3VDZ0YmsrMTAKT8l9nDJSQgEd+0xJHnDBmhUYHFjGz+1N
- mNvVD6cN6VDApslkmACFKl4Kb+f0+gKzUfny5GKMxCjc/BH0oYF0YA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ2RXS08xbi9hR2tLSVM5
+ eE5ITWdzMnozS0NMTjVkczNGSnd5UCtQZFdnCi9JZEZpSHAxdGtRLzZpVVhQWWp0
+ RGJOczNXVGVmYXdQN2M4V3BiYTRINUkKLS0tIFdXaC9IcDhyU2kxN0xLdlhHNFBl
+ MGF4bVk5OHRMTE1pZ1MxeXZvaEpvVUkKfXqsjq5cR9Cobw2YjdKJSRDGyEJqpFDF
+ y9AW29DvZ/oxbW/vgtoiruPZZd0ttQSpovX+wbc5mCH4A949ckqpBA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2024-11-23T00:40:19Z"
- mac: ENC[AES256_GCM,data:dIO5BTxj2d8wB9r9cjcSaIz28noyt19EWjzkgUYj0h/J3HIjscw95PLcDFdZ6/XFoIeN/I4hP9OeGBV+nWmCOJf6Yk0Y/VT1Zw6XKIPeAxzhPOcc0fXM4dyXegO1gUQDA3bzWZTVlKbB9InrDJNkJziHFZOLGvcYLTQ6iJrE4j8=,iv:P+NZJ4f7f+4fTEFFAykgYO58UCaD8DcVERqXADrUeoQ=,tag:jwz60APs0YflMtGfrSb32w==,type:str]
+ lastmodified: "2025-03-19T11:05:16Z"
+ mac: ENC[AES256_GCM,data:pHExX678QDJzYm+I8dyc9T2Kq+DLktVXGAvLWPqjvxRObL90Z/FpkEzb9EFS6dNvnWifrASsUqhDf7uXJU+R7y3KlgOxtSNGGQ+8VJ9nkfxxNaFdRwYXBKq+WqkZ5DfWfIIwdUN/K5eSUXx5Se+4MzokMWUhEdhO+dFSzERYFY4=,iv:7feVIvrTZAWskPPDQ5F6QxfJC+YNZY3R66fmenxnnts=,tag:RUgblvhjMr6NGelMiVyiNw==,type:str]
pgp: []
- encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
---
-# Ingress for bugzilla
-apiVersion: networking.k8s.io/v1
-kind: Ingress
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
metadata:
name: bugzilla
- labels:
- app.kubernetes.io/name: bugzilla
- app.kubernetes.io/instance: bugzilla
- annotations:
- cert-manager.io/cluster-issuer: letsencrypt-dns
- external-dns.alpha.kubernetes.io/hostname: midnightthoughts.space
+ namespace: bugzilla
spec:
+ parentRefs:
+ - name: envoy-gateway
+ namespace: envoy-gateway
+ hostnames:
+ - bugzilla.midnightthoughts.space
rules:
- - host: bugzilla.midnightthoughts.space
- http:
- paths:
- - path: /
- pathType: Prefix
- backend:
- service:
- name: bugzilla
- port:
- number: 8000
- tls:
- - hosts:
- - bugzilla.midnightthoughts.space
- secretName: bugzilla-tls
+ - backendRefs:
+ - name: bugzilla
+ port: 8000
+ timeouts:
+ request: 240s
+ backendRequest: 0s
sops:
kms: []
gcp_kms: []
@@ -255,14 +246,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGUDFZalJ5V2M4M3dFSFIr
- b0tQdlpFNzFzUld0Q3dkTWtoeUUzcE5IMm13CklhcnVUV1VDTURyYUNTR2FsQkMr
- VC9YVWhYWjF6cjVpSVpSYjh2TDlBUG8KLS0tIHhwbmQ1TG51QU5NMUREMFNRUG9E
- S1dmTGc0LzMzM2x2bFE3VDZ0YmsrMTAKT8l9nDJSQgEd+0xJHnDBmhUYHFjGz+1N
- mNvVD6cN6VDApslkmACFKl4Kb+f0+gKzUfny5GKMxCjc/BH0oYF0YA==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQ2RXS08xbi9hR2tLSVM5
+ eE5ITWdzMnozS0NMTjVkczNGSnd5UCtQZFdnCi9JZEZpSHAxdGtRLzZpVVhQWWp0
+ RGJOczNXVGVmYXdQN2M4V3BiYTRINUkKLS0tIFdXaC9IcDhyU2kxN0xLdlhHNFBl
+ MGF4bVk5OHRMTE1pZ1MxeXZvaEpvVUkKfXqsjq5cR9Cobw2YjdKJSRDGyEJqpFDF
+ y9AW29DvZ/oxbW/vgtoiruPZZd0ttQSpovX+wbc5mCH4A949ckqpBA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2024-11-23T00:40:19Z"
- mac: ENC[AES256_GCM,data:dIO5BTxj2d8wB9r9cjcSaIz28noyt19EWjzkgUYj0h/J3HIjscw95PLcDFdZ6/XFoIeN/I4hP9OeGBV+nWmCOJf6Yk0Y/VT1Zw6XKIPeAxzhPOcc0fXM4dyXegO1gUQDA3bzWZTVlKbB9InrDJNkJziHFZOLGvcYLTQ6iJrE4j8=,iv:P+NZJ4f7f+4fTEFFAykgYO58UCaD8DcVERqXADrUeoQ=,tag:jwz60APs0YflMtGfrSb32w==,type:str]
+ lastmodified: "2025-03-19T11:05:16Z"
+ mac: ENC[AES256_GCM,data:pHExX678QDJzYm+I8dyc9T2Kq+DLktVXGAvLWPqjvxRObL90Z/FpkEzb9EFS6dNvnWifrASsUqhDf7uXJU+R7y3KlgOxtSNGGQ+8VJ9nkfxxNaFdRwYXBKq+WqkZ5DfWfIIwdUN/K5eSUXx5Se+4MzokMWUhEdhO+dFSzERYFY4=,iv:7feVIvrTZAWskPPDQ5F6QxfJC+YNZY3R66fmenxnnts=,tag:RUgblvhjMr6NGelMiVyiNw==,type:str]
pgp: []
- encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -274,6 +274,18 @@ spec:
certificateRefs:
- kind: Secret
name: budget.midnightthoughts.space-tls
+ - name: https-midnightthoughts-bugzilla
+ protocol: HTTPS
+ hostname: "bugzilla.midnightthoughts.space"
+ port: 443
+ allowedRoutes:
+ namespaces:
+ from: "All"
+ tls:
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: bugzilla.midnightthoughts.space-tls
- name: https-midnightthoughts-root
protocol: HTTPS
hostname: "midnightthoughts.space"
