commit ba7b3f34dae43fe199421bc9b2bc2d4e7a95cd0c
parent 4e581460cdcc05c7eda975c916c6ffc2a75782e2
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Fri, 20 Mar 2026 22:28:08 +0100
cleanup
Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>
Diffstat:
1 file changed, 24 insertions(+), 108 deletions(-)
diff --git a/infrastructure_talos/controllers/longhorn.yaml b/infrastructure_talos/controllers/longhorn.yaml
@@ -2,6 +2,10 @@ apiVersion: v1
kind: Namespace
metadata:
name: longhorn-system
+ labels:
+ pod-security.kubernetes.io/enforce: privileged
+ pod-security.kubernetes.io/audit: privileged
+ pod-security.kubernetes.io/warn: privileged
sops:
kms: []
gcp_kms: []
@@ -11,104 +15,16 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXOGd6L1p5U0FYKzUya0da
- ZUNNSkxtaEFwSUJzQjV0QTAxQzQzTjFYL1djCnpNRnhGUHBVRHBSL1RQaWFQcGtP
- T09pRXc1SnBIWDBJY200RHB2d2tFN1EKLS0tIGg5ODZ3U0R2VmFwc2xZNERMQW9D
- ZEJoQmhhdjFGU21PV3U2aXRUSHROOVEKutWxnUscOaGw3n3aniAQX9z3wjmsTUwk
- ECSvGzHDQShZkm8WXAS82OjbP2LJgtW+Ci8o2RTZDZFAl2WXRX4rww==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYNiswVXNZNkR2bTN1S1JL
+ TDNBWkJYTGp1SWRpZzZmZmM0VkFmenRJRW5JCkN1dUhoS05LQlVTU0RDRWM5TEJ0
+ dk43WWVqZVZ0V0xUeFhWK0ZBMkNia0EKLS0tIEhDQjQ2bjRGa1FaMGpSeStOSk0v
+ dWRvY3hkR0REQms2NjhuWnhvbDV4UjgKNnPh5R/0PFIBVjlyMMf+PRkPhITRDODt
+ tl84LXYOcTVQHMKsymOsrAzhBvYk7bUC9hRGUJyb3ZoS29tNIKXnDQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2026-03-01T07:23:09Z"
- mac: ENC[AES256_GCM,data:IW+bk70jRwP8qbWF5U+RrXJLGwO9KtAksTLwtY3wN16XKdev0LQAQkY/P/SzFk208oTj+IToA4MrMl08afnTJyYYjDbqNFL3a7Qf/bLs4pvhWKk1IklABpxQqYojz+JKvAsb0hYnAUsupfCwkyRBg6FmEqNFQZTf8TqzazyySxU=,iv:Vu3F/4OaeX+l45IwH9R/nftRwcd1faUBne+6GBJWz2Y=,tag:0RTiH88yMhDcd/elFIt8DQ==,type:str]
+ lastmodified: "2026-03-20T21:28:03Z"
+ mac: ENC[AES256_GCM,data:p2Oin9eakHc3Kv+ok6mFv8+sPf/f77UtUCQlm2J5PsI9woxrGr51I+M8gXy2/LuvUUHykaE9uDjpYifArtmd7hzMSoD54hWbEGZWVhqWo5rNVc1fnBomb62BxULCJAzB7wwkDPJllJOSuT7OZGgmncGxcML3VhPZppXyuxi6WXA=,iv:BINk8FpRShMLH8RvPbsNo1ZHLJPGIcd9ogVgM1LbyJQ=,tag:jZ1UG5gG0A8OmYbLiHPzkw==,type:str]
pgp: []
- encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
- version: 3.9.1
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
- name: longhorn
- namespace: longhorn-system
-spec:
- interval: 24h
- url: https://charts.longhorn.io
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXOGd6L1p5U0FYKzUya0da
- ZUNNSkxtaEFwSUJzQjV0QTAxQzQzTjFYL1djCnpNRnhGUHBVRHBSL1RQaWFQcGtP
- T09pRXc1SnBIWDBJY200RHB2d2tFN1EKLS0tIGg5ODZ3U0R2VmFwc2xZNERMQW9D
- ZEJoQmhhdjFGU21PV3U2aXRUSHROOVEKutWxnUscOaGw3n3aniAQX9z3wjmsTUwk
- ECSvGzHDQShZkm8WXAS82OjbP2LJgtW+Ci8o2RTZDZFAl2WXRX4rww==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2026-03-01T07:23:09Z"
- mac: ENC[AES256_GCM,data:IW+bk70jRwP8qbWF5U+RrXJLGwO9KtAksTLwtY3wN16XKdev0LQAQkY/P/SzFk208oTj+IToA4MrMl08afnTJyYYjDbqNFL3a7Qf/bLs4pvhWKk1IklABpxQqYojz+JKvAsb0hYnAUsupfCwkyRBg6FmEqNFQZTf8TqzazyySxU=,iv:Vu3F/4OaeX+l45IwH9R/nftRwcd1faUBne+6GBJWz2Y=,tag:0RTiH88yMhDcd/elFIt8DQ==,type:str]
- pgp: []
- encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
- version: 3.9.1
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
- name: longhorn
- namespace: longhorn-system
-spec:
- releaseName: longhorn
- targetNamespace: longhorn-system
- interval: 30m
- install:
- crds: CreateReplace
- remediation:
- retries: 3
- upgrade:
- crds: CreateReplace
- remediation:
- retries: 3
- chart:
- spec:
- chart: longhorn
- version: 1.10.2
- sourceRef:
- kind: HelmRepository
- name: longhorn
- namespace: longhorn-system
- interval: 24h
- values:
- defaultSettings:
- allowCollectingLonghornUsageMetrics: false
- kubernetesClusterAutoscalerEnabled: false
- upgradeChecker: false
- networkPolicies:
- enabled: true
- type: rke1
- persistence:
- defaultClass: true
- preUpgradeChecker:
- upgradeVersionCheck: false
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXOGd6L1p5U0FYKzUya0da
- ZUNNSkxtaEFwSUJzQjV0QTAxQzQzTjFYL1djCnpNRnhGUHBVRHBSL1RQaWFQcGtP
- T09pRXc1SnBIWDBJY200RHB2d2tFN1EKLS0tIGg5ODZ3U0R2VmFwc2xZNERMQW9D
- ZEJoQmhhdjFGU21PV3U2aXRUSHROOVEKutWxnUscOaGw3n3aniAQX9z3wjmsTUwk
- ECSvGzHDQShZkm8WXAS82OjbP2LJgtW+Ci8o2RTZDZFAl2WXRX4rww==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2026-03-01T07:23:09Z"
- mac: ENC[AES256_GCM,data:IW+bk70jRwP8qbWF5U+RrXJLGwO9KtAksTLwtY3wN16XKdev0LQAQkY/P/SzFk208oTj+IToA4MrMl08afnTJyYYjDbqNFL3a7Qf/bLs4pvhWKk1IklABpxQqYojz+JKvAsb0hYnAUsupfCwkyRBg6FmEqNFQZTf8TqzazyySxU=,iv:Vu3F/4OaeX+l45IwH9R/nftRwcd1faUBne+6GBJWz2Y=,tag:0RTiH88yMhDcd/elFIt8DQ==,type:str]
- pgp: []
- encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
+ encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|smtp_auth_password|addresses|smtp_auth_username|authorization_credentials|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
version: 3.9.1
---
apiVersion: v1
@@ -118,10 +34,10 @@ metadata:
namespace: longhorn-system
type: Opaque
stringData:
- AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:2hpBMrT03VWbss+riB7On4ILrxY=,iv:R0FlUgdhKgVr5JLqBVmmUpOtSUZgyERI6CyFUOkCKt0=,tag:jQcQ8kIvTVuo1RrESXLVmQ==,type:str]
- AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:0b5FFcW1TCxkRXh+DBvyTUotlAkijH1byc9ZlBcXpCkXTQJOhq3W/w==,iv:7laWGOHM4FC3HJdIA/ZaUNKgLx5Zqn+u6wEQ+A3N540=,tag:ydUoaURroB4Fe+jt7IlgJw==,type:str]
- AWS_ENDPOINTS: ENC[AES256_GCM,data:hXkKLg6TwZM4IM6x4aIrzK6V+wmeZZA0exAUIiMbJlHZFhA=,iv:30HsBK6t+xJzZlOMMSRLVWBBWWAHX1pD8TingwNRYXI=,tag:hKnnD7Z/24wgNJrwVOxwhA==,type:str]
- VIRTUAL_HOSTED_STYLE: ENC[AES256_GCM,data:+xVAJg==,iv:DsmsnTdl0Lb7sLJM8Cs+McWaG6xn5PuJDL2cya1h9x0=,tag:N5vRGXUUJ8rBrjzUow66Ng==,type:str]
+ AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:FlkMN67HdstKGLVFOVoIye4ONfo=,iv:c6/2HDqsqHYX4HuaGvhOcuXNo8ninBlwjdQ+rFXp+IA=,tag:rIr7rNKdXxHWAX6MAiAIXA==,type:str]
+ AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:+lzeJU/6ybhCLWnh2DySL7yf0MLBXJiPZjBD84vLdX8C9yYaqqomwQ==,iv:kSX0jdGZ2FeDP4LGZn+/PcOOHUGoFgaJ98Hsi330Bh4=,tag:6Yx2s8IMdUukhf8cEEflog==,type:str]
+ AWS_ENDPOINTS: ENC[AES256_GCM,data:gw+inzGWsyJ5kWcJ+D53R82RpM5tuUiK8UwVcplNUZLhk9Y=,iv:nK3G2/GfDCwPOPAX6fEPEI5myUyoj6cLW1T7KW3SsOk=,tag:AZ/CjkdRpRaIjsJ9db5DiQ==,type:str]
+ VIRTUAL_HOSTED_STYLE: ENC[AES256_GCM,data:zMI+Sw==,iv:my+XFrJA0jYcoCZzJQ5RzLC6Tsa6bmts9Gp8gTHZRgo=,tag:Hu0aMjiz+XiZcImx3ebnQg==,type:str]
sops:
kms: []
gcp_kms: []
@@ -131,14 +47,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXOGd6L1p5U0FYKzUya0da
- ZUNNSkxtaEFwSUJzQjV0QTAxQzQzTjFYL1djCnpNRnhGUHBVRHBSL1RQaWFQcGtP
- T09pRXc1SnBIWDBJY200RHB2d2tFN1EKLS0tIGg5ODZ3U0R2VmFwc2xZNERMQW9D
- ZEJoQmhhdjFGU21PV3U2aXRUSHROOVEKutWxnUscOaGw3n3aniAQX9z3wjmsTUwk
- ECSvGzHDQShZkm8WXAS82OjbP2LJgtW+Ci8o2RTZDZFAl2WXRX4rww==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYNiswVXNZNkR2bTN1S1JL
+ TDNBWkJYTGp1SWRpZzZmZmM0VkFmenRJRW5JCkN1dUhoS05LQlVTU0RDRWM5TEJ0
+ dk43WWVqZVZ0V0xUeFhWK0ZBMkNia0EKLS0tIEhDQjQ2bjRGa1FaMGpSeStOSk0v
+ dWRvY3hkR0REQms2NjhuWnhvbDV4UjgKNnPh5R/0PFIBVjlyMMf+PRkPhITRDODt
+ tl84LXYOcTVQHMKsymOsrAzhBvYk7bUC9hRGUJyb3ZoS29tNIKXnDQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2026-03-01T07:23:09Z"
- mac: ENC[AES256_GCM,data:IW+bk70jRwP8qbWF5U+RrXJLGwO9KtAksTLwtY3wN16XKdev0LQAQkY/P/SzFk208oTj+IToA4MrMl08afnTJyYYjDbqNFL3a7Qf/bLs4pvhWKk1IklABpxQqYojz+JKvAsb0hYnAUsupfCwkyRBg6FmEqNFQZTf8TqzazyySxU=,iv:Vu3F/4OaeX+l45IwH9R/nftRwcd1faUBne+6GBJWz2Y=,tag:0RTiH88yMhDcd/elFIt8DQ==,type:str]
+ lastmodified: "2026-03-20T21:28:03Z"
+ mac: ENC[AES256_GCM,data:p2Oin9eakHc3Kv+ok6mFv8+sPf/f77UtUCQlm2J5PsI9woxrGr51I+M8gXy2/LuvUUHykaE9uDjpYifArtmd7hzMSoD54hWbEGZWVhqWo5rNVc1fnBomb62BxULCJAzB7wwkDPJllJOSuT7OZGgmncGxcML3VhPZppXyuxi6WXA=,iv:BINk8FpRShMLH8RvPbsNo1ZHLJPGIcd9ogVgM1LbyJQ=,tag:jZ1UG5gG0A8OmYbLiHPzkw==,type:str]
pgp: []
- encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
+ encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|smtp_auth_password|addresses|smtp_auth_username|authorization_credentials|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
version: 3.9.1
