commit c7f1e0d494c58457b5db382f771173713b46b1f2
parent 6ccffacc64858bd5824d113a59dc3ae788681fe0
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Wed, 4 Mar 2026 10:48:06 +0100
fix perms
Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>
Diffstat:
1 file changed, 43 insertions(+), 43 deletions(-)
diff --git a/infrastructure_talos/configs/cnpg-base.yaml b/infrastructure_talos/configs/cnpg-base.yaml
@@ -1,54 +1,54 @@
apiVersion: v1
kind: Namespace
metadata:
- name: postgres-cluster
+ name: postgres-cluster
sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0N1BGMnF0aXJyMDA5QUl6
- TnFSbzM5NERsOTRWRktOTHkxd21xaVhXckQwClA0MVphWFBiQUdjMWdpVSt3Tk1h
- ZEo0NmdkTVZJM2k3ek01RFVzanFjMmsKLS0tIHBIVTBGbWN4a2taZUwwVjNnZ2VI
- UkZsYnRCdEF2UzRpZlh2YWJvSS9Rc3cK+/a5ffH1YpdTLncgjKKdsySfWWsvHD8S
- Raz0fKLqubw0haQymE00nwO55Xle8uFpT5EUw0mde6uk6qw94oUd4w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-07T11:54:40Z"
- mac: ENC[AES256_GCM,data:sevTqr3PEaBa2y/yXkHffu8HVC8FF6ZT+ECEbbcCZLEoaoqFjpnMboQJ8N4hVnI9EgyHDtHIbJm7XasNwoxxKPj7g00Y6hVqKELaZ5xV8K0HX5jWkIfZDBLjVjt8vCy7q2G0Qt9xk/L4bdInaeYsdxMwFX3IIfnKeCObKPKnJos=,iv:sgP/rT1CxnGbSyfy6tUn4Eul3iRmFREp36YRpbvV/yQ=,tag:Zj1fbyiNvTYnH8cugd7tMA==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRenB0bklJcThLUEZDZnZF
+ WmYxcHh4K2RMN2dHQXk3MHl2V0g1Q2doVWg4ClZvVmxyUHdrdlo0YXFWbmhoaFlo
+ dkVYVkdOY1BIRmFTWnJNTXovSzZhWW8KLS0tIHVzZS9xYmRJdkdvakZ2Z2hTdXFB
+ UUREd0xTc21hRmxNT2NGOXhLV0VkYzgKz+4y2imTDL2P9mX/tHp68F1p7cB2syVo
+ rn2e1FtzdjfrE+J3uu1CIdQr9CbPqHxw+gxwV6SR46HmMSl53gdShA==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2026-03-04T09:47:55Z"
+ mac: ENC[AES256_GCM,data:UzKZUAZX/R90aI+jAr42sogaxGEmpbfMPsEpwBtcGDpxpD6/axoohP0nSJOsQ0zJFsmI/TjlW18AKye5MjWEAQ1AHC/YQLL4H0osJDZeUm3qq9Uu59HGn3Wka0UDUkWPqjenPwvX2Jk4uU2T9V13+t7muMLP1UjvN/OTKOwBWRI=,iv:rv7zHndspdlp5bnVSKCpziQJbXDazFWzF6+RALnha14=,tag:I7YZeReQ60cSfnaVhSfDyg==,type:str]
+ pgp: []
+ encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
+ version: 3.9.1
---
apiVersion: v1
kind: Secret
metadata:
- name: pg-s3-credentials
- namespace: postgres-cluster
+ name: pg-s3-credentials
+ namespace: postgres-cluster
type: Opaque
stringData:
- ACCESS_KEY_ID: ENC[AES256_GCM,data:7vfRcwqHX/ZWAL7iWwUt8TImlMM=,iv:NdWhotFN0HG+z6ev0HStZzeLeh8/8JsuEkr3Fxu7yMw=,tag:Rm/wZcV+Vyb8joY95gG04w==,type:str]
- ACCESS_SECRET_KEY: ENC[AES256_GCM,data:lngfjs9DGvwTEpNjbSDC1cPoVY/9PHrcNVlke/oMr9b+br8MoBD9oA==,iv:L8lY0NpVvJwZIaj+wMEcoQCknvh8bdTZyboDaaYjkcQ=,tag:O+Sc3MOQAp1W6htnXawxKw==,type:str]
+ ACCESS_KEY_ID: ENC[AES256_GCM,data:z3ScemPDpbKrWXKmfjTot1szUX0=,iv:Uxr3E0ZXwLqRM1HeA+4p8eI/KG2I1lCv6zI8r4W9lvE=,tag:BMgp+OcI7yjQhObeB34dMg==,type:str]
+ ACCESS_SECRET_KEY: ENC[AES256_GCM,data:TZ3hP0A9G/0R65ji3kSspL27EQmizOCM1Vgj9ExAf4d25LJ1HxK+BQ==,iv:JNSZFtihQtyg9O3lMqAWHLPSukG957e+4rAyVJxWL3c=,tag:TEHKzTFM+xGd0tF4JFucbA==,type:str]
sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0N1BGMnF0aXJyMDA5QUl6
- TnFSbzM5NERsOTRWRktOTHkxd21xaVhXckQwClA0MVphWFBiQUdjMWdpVSt3Tk1h
- ZEo0NmdkTVZJM2k3ek01RFVzanFjMmsKLS0tIHBIVTBGbWN4a2taZUwwVjNnZ2VI
- UkZsYnRCdEF2UzRpZlh2YWJvSS9Rc3cK+/a5ffH1YpdTLncgjKKdsySfWWsvHD8S
- Raz0fKLqubw0haQymE00nwO55Xle8uFpT5EUw0mde6uk6qw94oUd4w==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-08-07T11:54:40Z"
- mac: ENC[AES256_GCM,data:sevTqr3PEaBa2y/yXkHffu8HVC8FF6ZT+ECEbbcCZLEoaoqFjpnMboQJ8N4hVnI9EgyHDtHIbJm7XasNwoxxKPj7g00Y6hVqKELaZ5xV8K0HX5jWkIfZDBLjVjt8vCy7q2G0Qt9xk/L4bdInaeYsdxMwFX3IIfnKeCObKPKnJos=,iv:sgP/rT1CxnGbSyfy6tUn4Eul3iRmFREp36YRpbvV/yQ=,tag:Zj1fbyiNvTYnH8cugd7tMA==,type:str]
- pgp: []
- encrypted_regex: ^(GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
- version: 3.9.1
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRenB0bklJcThLUEZDZnZF
+ WmYxcHh4K2RMN2dHQXk3MHl2V0g1Q2doVWg4ClZvVmxyUHdrdlo0YXFWbmhoaFlo
+ dkVYVkdOY1BIRmFTWnJNTXovSzZhWW8KLS0tIHVzZS9xYmRJdkdvakZ2Z2hTdXFB
+ UUREd0xTc21hRmxNT2NGOXhLV0VkYzgKz+4y2imTDL2P9mX/tHp68F1p7cB2syVo
+ rn2e1FtzdjfrE+J3uu1CIdQr9CbPqHxw+gxwV6SR46HmMSl53gdShA==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2026-03-04T09:47:55Z"
+ mac: ENC[AES256_GCM,data:UzKZUAZX/R90aI+jAr42sogaxGEmpbfMPsEpwBtcGDpxpD6/axoohP0nSJOsQ0zJFsmI/TjlW18AKye5MjWEAQ1AHC/YQLL4H0osJDZeUm3qq9Uu59HGn3Wka0UDUkWPqjenPwvX2Jk4uU2T9V13+t7muMLP1UjvN/OTKOwBWRI=,iv:rv7zHndspdlp5bnVSKCpziQJbXDazFWzF6+RALnha14=,tag:I7YZeReQ60cSfnaVhSfDyg==,type:str]
+ pgp: []
+ encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
+ version: 3.9.1
