commit a5da64a4dbfd4c51da7abcd2b614c39ee545b27f
parent 6d51cd7d98819877ad9e2b29683adcbdadb5b395
Author: MTRNord <mtrnord1@gmail.com>
Date: Wed, 15 Jan 2025 01:33:40 +0100
Envoy
Diffstat:
8 files changed, 90 insertions(+), 40 deletions(-)
diff --git a/apps/2024_cluster/namespaces/envoy-gateway.yaml b/apps/2024_cluster/namespaces/envoy-gateway.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+ name: envoy-gateway
diff --git a/apps/2024_cluster/namespaces/kustomization.yaml b/apps/2024_cluster/namespaces/kustomization.yaml
@@ -27,3 +27,4 @@ resources:
- osticket.yaml
- mailserver.yaml
- neoboard.yaml
+ - envoy-gateway.yaml
diff --git a/apps/base/envoy-gateway/kustomization.yaml b/apps/base/envoy-gateway/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: envoy-gateway
+resources:
+ - repository.yaml
+ - release.yaml
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -0,0 +1,23 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+ name: envoy-gateway
+ namespace: envoy-gateway
+spec:
+ releaseName: envoy-gateway
+ interval: 60m
+ chartRef:
+ kind: OCIRepository
+ name: envoy-gateway
+ values:
+ podDisruptionBudget:
+ minAvailable: 1
+ deployment:
+ replicas: 3
+---
+apiVersion: gateway.networking.k8s.io/v1beta1
+kind: GatewayClass
+metadata:
+ name: envoy-gateway-class
+spec:
+ controllerName: gateway.envoyproxy.io/controller
diff --git a/apps/base/envoy-gateway/repository.yaml b/apps/base/envoy-gateway/repository.yaml
@@ -0,0 +1,10 @@
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: OCIRepository
+metadata:
+ name: envoy-gateway
+ namespace: envoy-gateway
+spec:
+ interval: 60m
+ url: oci://docker.io/envoyproxy/gateway-helm
+ ref:
+ semver: ">=1.2.5"
diff --git a/apps/base/externaldns/release.yaml b/apps/base/externaldns/release.yaml
@@ -25,3 +25,9 @@ spec:
secretKeyRef:
name: cloudflare-api-token-secret
key: api-token
+ sources:
+ - gateway-httproute
+ - gateway-grpcroute
+ - gateway-tcproute
+ - gateway-tlsroute
+ - gateway-udproute
diff --git a/infrastructure/configs/cnpg-cluster.yaml b/infrastructure/configs/cnpg-cluster.yaml
@@ -11,14 +11,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFb1RHelJuVTNuTzh0MmNT
- VGZJdE8yeWcvN2V2RjFDczYxNW1sQ25ObFRzCjJYaWhpRTZpOHJ3NUMzajVyeGNQ
- NVB5cDBuT2IwYmQvSTdRdVlNTTVKQVUKLS0tIE5BVXNnV0lhdUltV2o3M2NLTy9o
- VzZrcExYa01rcHM2dkpDZmpTSy90OGsKPo+z9jMyaAaqzols2mqna/KB9V7NIiqC
- 9KaRaLjRkOwmeSlWY7xtlzPHzeC3K62vAUUHnTrUlXEmG9OWTQhqyg==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvcHBnTVExK1Y3OHRQN3BH
+ RnZyUVVMNkx5RW5UTHFiN3RicU5DcW1iZUNJCllGTVNKVDJoVmtUQXdQTnZOYnZG
+ Y3BFM0lIbWN2UXBxN2QvZFdEVlJEd2MKLS0tIHVMbXRMbGhWZkx6WUYvL21XSVJo
+ dkxEa1ZNcDFKR3p3RDliY2p2VWdUNncKEjBAIH8R9fGn+JjMZEX8oS5InPybGd02
+ C8yImYKd3Jkj8+15S+ezySmpYH74XYSVOYlwCVDDsTd7q7VInFY8bQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-14T18:20:27Z"
- mac: ENC[AES256_GCM,data:U3dG/QFGFRYHE5cCsazV0m72g086x3Jz4MNTcXKxwoLWto/ZX5n8dwTohYIl9ANs3uGW6/o+460rBLdN95u/damM/VvCI7rUT0PwPvVB1pzSvQdPIm6rDnlZzDMegk4LgD4hRMaMPIkgenzxMhIV6pDoP5lammUnoBblvy6rRUs=,iv:PAoGHb5XUlh8+EEcLt0ft6h3XN3R+ianDA+t2yGH6+I=,tag:VbLHJHPWOg4hdLRBQbtWqQ==,type:str]
+ lastmodified: "2025-01-14T19:05:06Z"
+ mac: ENC[AES256_GCM,data:yWLylzzgvk8j0KkkiJYMZ8A7XGHjML6tln1X7mCr2Cz5GXsu/IWo0sOd0oXy/z/Jjnj2wup3meEgOYOG43ooYM7ZTN3W9dNBgzrWvB8dl2lSLMfrAcxAMbO+Zvpfp0nLCn/d02Ur31AVwN8j+yuyQEJrE66+HDGgJUWgEYYdXKc=,iv:v/uZM4OXktEtXhYiLcTo0CYUtFtN3pDn22V7NNxS0qY=,tag:XBuNUnj8+Ws5E/bGyPAwiA==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -30,8 +30,8 @@ metadata:
namespace: postgres-cluster
type: Opaque
stringData:
- ACCESS_KEY_ID: ENC[AES256_GCM,data:EstNoSPjWodztLo8Dl55ANrDaHE=,iv:Bk9jwHdL1FLLgrmhXiEntT4X5q2G+ryDBJsAG9HYCuI=,tag:mMgdWTvwuaXGMg9hynSsdQ==,type:str]
- ACCESS_SECRET_KEY: ENC[AES256_GCM,data:Elrfb/bBUWcI+BD7BLAS+K9/v4VXMQYEriF5mg7eV1ge0vbFiXZV3Q==,iv:B/OKuLSebAhL9zMQ4ljt2YQCbarxD9WNHJRDzyqvGS0=,tag:7T9KPTodpXq+G/o2tV6lqw==,type:str]
+ ACCESS_KEY_ID: ENC[AES256_GCM,data:sorZD7juSrtRY8HIGX7IbHHntSE=,iv:ti11MurR88xlmHZKH21bekpN9bDJWa3fWfbeD3CCuoM=,tag:/f2ro8ij7+5g+oyETqKxBw==,type:str]
+ ACCESS_SECRET_KEY: ENC[AES256_GCM,data:hbxVShA6hvz6Kyw6wkt6ZP/g1AQUYaBkuNyqwlAvwrt79B969ODqMg==,iv:/0BrRyiH6aM55hzbfIpIV6a9v461BvCRzz2gpF4Oxjc=,tag:qGcvE8N5dwv9q004FL+pRA==,type:str]
sops:
kms: []
gcp_kms: []
@@ -41,14 +41,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFb1RHelJuVTNuTzh0MmNT
- VGZJdE8yeWcvN2V2RjFDczYxNW1sQ25ObFRzCjJYaWhpRTZpOHJ3NUMzajVyeGNQ
- NVB5cDBuT2IwYmQvSTdRdVlNTTVKQVUKLS0tIE5BVXNnV0lhdUltV2o3M2NLTy9o
- VzZrcExYa01rcHM2dkpDZmpTSy90OGsKPo+z9jMyaAaqzols2mqna/KB9V7NIiqC
- 9KaRaLjRkOwmeSlWY7xtlzPHzeC3K62vAUUHnTrUlXEmG9OWTQhqyg==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvcHBnTVExK1Y3OHRQN3BH
+ RnZyUVVMNkx5RW5UTHFiN3RicU5DcW1iZUNJCllGTVNKVDJoVmtUQXdQTnZOYnZG
+ Y3BFM0lIbWN2UXBxN2QvZFdEVlJEd2MKLS0tIHVMbXRMbGhWZkx6WUYvL21XSVJo
+ dkxEa1ZNcDFKR3p3RDliY2p2VWdUNncKEjBAIH8R9fGn+JjMZEX8oS5InPybGd02
+ C8yImYKd3Jkj8+15S+ezySmpYH74XYSVOYlwCVDDsTd7q7VInFY8bQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-14T18:20:27Z"
- mac: ENC[AES256_GCM,data:U3dG/QFGFRYHE5cCsazV0m72g086x3Jz4MNTcXKxwoLWto/ZX5n8dwTohYIl9ANs3uGW6/o+460rBLdN95u/damM/VvCI7rUT0PwPvVB1pzSvQdPIm6rDnlZzDMegk4LgD4hRMaMPIkgenzxMhIV6pDoP5lammUnoBblvy6rRUs=,iv:PAoGHb5XUlh8+EEcLt0ft6h3XN3R+ianDA+t2yGH6+I=,tag:VbLHJHPWOg4hdLRBQbtWqQ==,type:str]
+ lastmodified: "2025-01-14T19:05:06Z"
+ mac: ENC[AES256_GCM,data:yWLylzzgvk8j0KkkiJYMZ8A7XGHjML6tln1X7mCr2Cz5GXsu/IWo0sOd0oXy/z/Jjnj2wup3meEgOYOG43ooYM7ZTN3W9dNBgzrWvB8dl2lSLMfrAcxAMbO+Zvpfp0nLCn/d02Ur31AVwN8j+yuyQEJrE66+HDGgJUWgEYYdXKc=,iv:v/uZM4OXktEtXhYiLcTo0CYUtFtN3pDn22V7NNxS0qY=,tag:XBuNUnj8+Ws5E/bGyPAwiA==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -78,10 +78,10 @@ spec:
s3Credentials:
accessKeyId:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:zbPI+htALr6zeEKprQ==,iv:nZaXLHD6qzfrcOanpe5xqBTkunmupncskfjuG/zq8aA=,tag:rR7CfLINyj9w+IqHddziVg==,type:str]
+ key: ENC[AES256_GCM,data:xe4o62vp7kt9+8URLQ==,iv:H2NZlfiaI95s/WA890fLMitVptwi7GDmOFqRq335+vM=,tag:YNembi7nfm5NPR3WTtES7w==,type:str]
secretAccessKey:
name: pg-s3-credentials
- key: ENC[AES256_GCM,data:CGbqAcO6myW9WKLWu35Q6WQ=,iv:jGQcPC3Cr9d1D2cnb3ckO3ujpoEnPBOYPV18juQU16U=,tag:jfVXk2lx36sxvlfDvoq65Q==,type:str]
+ key: ENC[AES256_GCM,data:0/oLrkD78lLzEpZnS3SRwXE=,iv:6K5O0URLLY2BqEHQzcK3RTYULmuj6TayOI4SAABgQHY=,tag:vA8BtS3XIldfk+uhkwLxLw==,type:str]
wal:
compression: gzip
maxParallel: 8
@@ -226,14 +226,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFb1RHelJuVTNuTzh0MmNT
- VGZJdE8yeWcvN2V2RjFDczYxNW1sQ25ObFRzCjJYaWhpRTZpOHJ3NUMzajVyeGNQ
- NVB5cDBuT2IwYmQvSTdRdVlNTTVKQVUKLS0tIE5BVXNnV0lhdUltV2o3M2NLTy9o
- VzZrcExYa01rcHM2dkpDZmpTSy90OGsKPo+z9jMyaAaqzols2mqna/KB9V7NIiqC
- 9KaRaLjRkOwmeSlWY7xtlzPHzeC3K62vAUUHnTrUlXEmG9OWTQhqyg==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvcHBnTVExK1Y3OHRQN3BH
+ RnZyUVVMNkx5RW5UTHFiN3RicU5DcW1iZUNJCllGTVNKVDJoVmtUQXdQTnZOYnZG
+ Y3BFM0lIbWN2UXBxN2QvZFdEVlJEd2MKLS0tIHVMbXRMbGhWZkx6WUYvL21XSVJo
+ dkxEa1ZNcDFKR3p3RDliY2p2VWdUNncKEjBAIH8R9fGn+JjMZEX8oS5InPybGd02
+ C8yImYKd3Jkj8+15S+ezySmpYH74XYSVOYlwCVDDsTd7q7VInFY8bQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-14T18:20:27Z"
- mac: ENC[AES256_GCM,data:U3dG/QFGFRYHE5cCsazV0m72g086x3Jz4MNTcXKxwoLWto/ZX5n8dwTohYIl9ANs3uGW6/o+460rBLdN95u/damM/VvCI7rUT0PwPvVB1pzSvQdPIm6rDnlZzDMegk4LgD4hRMaMPIkgenzxMhIV6pDoP5lammUnoBblvy6rRUs=,iv:PAoGHb5XUlh8+EEcLt0ft6h3XN3R+ianDA+t2yGH6+I=,tag:VbLHJHPWOg4hdLRBQbtWqQ==,type:str]
+ lastmodified: "2025-01-14T19:05:06Z"
+ mac: ENC[AES256_GCM,data:yWLylzzgvk8j0KkkiJYMZ8A7XGHjML6tln1X7mCr2Cz5GXsu/IWo0sOd0oXy/z/Jjnj2wup3meEgOYOG43ooYM7ZTN3W9dNBgzrWvB8dl2lSLMfrAcxAMbO+Zvpfp0nLCn/d02Ur31AVwN8j+yuyQEJrE66+HDGgJUWgEYYdXKc=,iv:v/uZM4OXktEtXhYiLcTo0CYUtFtN3pDn22V7NNxS0qY=,tag:XBuNUnj8+Ws5E/bGyPAwiA==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -258,14 +258,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFb1RHelJuVTNuTzh0MmNT
- VGZJdE8yeWcvN2V2RjFDczYxNW1sQ25ObFRzCjJYaWhpRTZpOHJ3NUMzajVyeGNQ
- NVB5cDBuT2IwYmQvSTdRdVlNTTVKQVUKLS0tIE5BVXNnV0lhdUltV2o3M2NLTy9o
- VzZrcExYa01rcHM2dkpDZmpTSy90OGsKPo+z9jMyaAaqzols2mqna/KB9V7NIiqC
- 9KaRaLjRkOwmeSlWY7xtlzPHzeC3K62vAUUHnTrUlXEmG9OWTQhqyg==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvcHBnTVExK1Y3OHRQN3BH
+ RnZyUVVMNkx5RW5UTHFiN3RicU5DcW1iZUNJCllGTVNKVDJoVmtUQXdQTnZOYnZG
+ Y3BFM0lIbWN2UXBxN2QvZFdEVlJEd2MKLS0tIHVMbXRMbGhWZkx6WUYvL21XSVJo
+ dkxEa1ZNcDFKR3p3RDliY2p2VWdUNncKEjBAIH8R9fGn+JjMZEX8oS5InPybGd02
+ C8yImYKd3Jkj8+15S+ezySmpYH74XYSVOYlwCVDDsTd7q7VInFY8bQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-14T18:20:27Z"
- mac: ENC[AES256_GCM,data:U3dG/QFGFRYHE5cCsazV0m72g086x3Jz4MNTcXKxwoLWto/ZX5n8dwTohYIl9ANs3uGW6/o+460rBLdN95u/damM/VvCI7rUT0PwPvVB1pzSvQdPIm6rDnlZzDMegk4LgD4hRMaMPIkgenzxMhIV6pDoP5lammUnoBblvy6rRUs=,iv:PAoGHb5XUlh8+EEcLt0ft6h3XN3R+ianDA+t2yGH6+I=,tag:VbLHJHPWOg4hdLRBQbtWqQ==,type:str]
+ lastmodified: "2025-01-14T19:05:06Z"
+ mac: ENC[AES256_GCM,data:yWLylzzgvk8j0KkkiJYMZ8A7XGHjML6tln1X7mCr2Cz5GXsu/IWo0sOd0oXy/z/Jjnj2wup3meEgOYOG43ooYM7ZTN3W9dNBgzrWvB8dl2lSLMfrAcxAMbO+Zvpfp0nLCn/d02Ur31AVwN8j+yuyQEJrE66+HDGgJUWgEYYdXKc=,iv:v/uZM4OXktEtXhYiLcTo0CYUtFtN3pDn22V7NNxS0qY=,tag:XBuNUnj8+Ws5E/bGyPAwiA==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -291,14 +291,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFb1RHelJuVTNuTzh0MmNT
- VGZJdE8yeWcvN2V2RjFDczYxNW1sQ25ObFRzCjJYaWhpRTZpOHJ3NUMzajVyeGNQ
- NVB5cDBuT2IwYmQvSTdRdVlNTTVKQVUKLS0tIE5BVXNnV0lhdUltV2o3M2NLTy9o
- VzZrcExYa01rcHM2dkpDZmpTSy90OGsKPo+z9jMyaAaqzols2mqna/KB9V7NIiqC
- 9KaRaLjRkOwmeSlWY7xtlzPHzeC3K62vAUUHnTrUlXEmG9OWTQhqyg==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvcHBnTVExK1Y3OHRQN3BH
+ RnZyUVVMNkx5RW5UTHFiN3RicU5DcW1iZUNJCllGTVNKVDJoVmtUQXdQTnZOYnZG
+ Y3BFM0lIbWN2UXBxN2QvZFdEVlJEd2MKLS0tIHVMbXRMbGhWZkx6WUYvL21XSVJo
+ dkxEa1ZNcDFKR3p3RDliY2p2VWdUNncKEjBAIH8R9fGn+JjMZEX8oS5InPybGd02
+ C8yImYKd3Jkj8+15S+ezySmpYH74XYSVOYlwCVDDsTd7q7VInFY8bQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-01-14T18:20:27Z"
- mac: ENC[AES256_GCM,data:U3dG/QFGFRYHE5cCsazV0m72g086x3Jz4MNTcXKxwoLWto/ZX5n8dwTohYIl9ANs3uGW6/o+460rBLdN95u/damM/VvCI7rUT0PwPvVB1pzSvQdPIm6rDnlZzDMegk4LgD4hRMaMPIkgenzxMhIV6pDoP5lammUnoBblvy6rRUs=,iv:PAoGHb5XUlh8+EEcLt0ft6h3XN3R+ianDA+t2yGH6+I=,tag:VbLHJHPWOg4hdLRBQbtWqQ==,type:str]
+ lastmodified: "2025-01-14T19:05:06Z"
+ mac: ENC[AES256_GCM,data:yWLylzzgvk8j0KkkiJYMZ8A7XGHjML6tln1X7mCr2Cz5GXsu/IWo0sOd0oXy/z/Jjnj2wup3meEgOYOG43ooYM7ZTN3W9dNBgzrWvB8dl2lSLMfrAcxAMbO+Zvpfp0nLCn/d02Ur31AVwN8j+yuyQEJrE66+HDGgJUWgEYYdXKc=,iv:v/uZM4OXktEtXhYiLcTo0CYUtFtN3pDn22V7NNxS0qY=,tag:XBuNUnj8+Ws5E/bGyPAwiA==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
diff --git a/infrastructure/controllers/cert-manager.yaml b/infrastructure/controllers/cert-manager.yaml
@@ -30,7 +30,7 @@ spec:
interval: 12h
values:
extraArgs:
- - "--feature-gates=AdditionalCertificateOutputFormats=true"
+ - "--feature-gates=AdditionalCertificateOutputFormats=true,ExperimentalGatewayAPISupport=true"
installCRDs: true
enableCertificateOwnerRef: false
prometheus:
