commit cb55a82b68f844c5a5b8811e82c60a37c7397f73
parent dc00e23410c7dc9841c8b4e1e6746da7963cb51d
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Tue, 18 Nov 2025 15:17:47 +0100
fixup
Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>
Diffstat:
4 files changed, 123 insertions(+), 144 deletions(-)
diff --git a/apps/talos_cluster/externaldns/kustomization.yaml b/apps/talos_cluster/externaldns/kustomization.yaml
@@ -4,3 +4,4 @@ namespace: kube-system
resources:
- repository.yaml
- release.yaml
+ - release2.yaml
diff --git a/apps/talos_cluster/externaldns/release.yaml b/apps/talos_cluster/externaldns/release.yaml
@@ -1,166 +1,65 @@
-apiVersion: ENC[AES256_GCM,data:rIq4ChpFk1DvKLwLHkxwoiK1D5VWK9wp8RT1x3CO,iv:/XZSR+1sNO+k0Gj8zx1OJJdBi0w72XbftABBAxoWJ8E=,tag:MsAPHcelctjXIRgXZLX+rw==,type:str]
-kind: ENC[AES256_GCM,data:59EVjKi6LyuUClE=,iv:KYaB58TEZISIuwBpRdw2dtaLv3UQjh1Oim8E3c9cBag=,tag:2RNsIZdgIH2VNH4us1hgXQ==,type:str]
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
+kind: HelmRelease
metadata:
- name: ENC[AES256_GCM,data:CTATXb+Pz2L5pujf,iv:SA2/8qGTpBsc5ZMJyvmfW1oDHtaVgO5mb7iFY2HOU5c=,tag:vqUAJEbsO/2AMtaWNxltuw==,type:str]
- namespace: ENC[AES256_GCM,data:CBOOsAG4VkmVABM=,iv:l/u6adzAZ1j3FU/YHWy2jwNBwG5bHhBTmz92Sv+2BEM=,tag:9xyXu6SQISoB43MUH+o/Lw==,type:str]
+ name: external-dns
+ namespace: kube-system
spec:
- releaseName: ENC[AES256_GCM,data:/zb1jQhlGxmhLSu5,iv:evB4kiMEPPvfFzaII120rVpNbVht7bdUs59VnYOw09w=,tag:tyzFOYGoG8kHSRd2pjbWoA==,type:str]
+ releaseName: external-dns
chart:
spec:
- chart: ENC[AES256_GCM,data:M1xDmg3/g1U5ECfr,iv:cPruG+RugFQRIegAcMkCzyzs7HrCaCroUk2tp5AnEg4=,tag:Aaf/JN/GJXylVeXcv+j9DA==,type:str]
+ chart: external-dns
sourceRef:
- kind: ENC[AES256_GCM,data:Q6qRYf/vSD6Uqhn21eY=,iv:ymu6o8k3tl5MBEiYLj0KVZNmmt3ysjCYwBEqdC8or8U=,tag:ZbCvXBa/4asBt0AWWIY/3Q==,type:str]
- name: ENC[AES256_GCM,data:6OmI71S8rynUhGQk,iv:9Py+cZ/Y6SudtFa73uc0uJcz9cT6ZeaRm80gdjJDm+g=,tag:fQSUkq4kZO6IkdXBMAw6cg==,type:str]
- interval: ENC[AES256_GCM,data:G/s+,iv:+KArmtTBJE/iQDmpKRL0Hc04wNKz+UfpomGsTBJEM7Y=,tag:gxaZTvYFAnitgt2So+v7dw==,type:str]
+ kind: HelmRepository
+ name: external-dns
+ interval: 50m
values:
- logLevel: ENC[AES256_GCM,data:xTSNoe0=,iv:TEcUy4ZZGBr/JAfN2x9bZX8a6+0/mP0z3rdLZb1U0fg=,tag:5hqV3uVob7pyt6ImMuUXUw==,type:str]
+ logLevel: debug
extraArgs:
- - ENC[AES256_GCM,data:VzWyKqBwluQoRBWv5XEvOsZp2iYXX+Lk+kXT2btcl5Jk18Tm9VE=,iv:o6Lf3BdEYACxv4Zt3lKAUka6QIikdQf1slH1VFQ+tTU=,tag:joqIm+GqAV+BeShaN+qxpA==,type:str]
- - ENC[AES256_GCM,data:c7lJ+6OBASW7QR8paY6VysdReLQNCb1zeZyYMzsfXQ==,iv:uZSC4Iz2HPrAzdArNoYd/AG+2bnk0hZxIoW8J8KDNzI=,tag:tQqAtrM3iICaaa9XhWg1SQ==,type:str]
+ - --cloudflare-dns-records-per-page=5000
+ - --exclude-target-net=10.0.0.0/8
provider:
- name: ENC[AES256_GCM,data:+qVLd3t8tN+VOQ==,iv:/W+X1uz9wlPkvun546JZl7v1cO233htBzGuDxAIqRoA=,tag:19J6h5dzdWrhT1l/My/xUQ==,type:str]
+ name: cloudflare
env:
- - name: ENC[AES256_GCM,data:ZRoJkK0DFCxWRsQL,iv:bGvG323gkFna5SWnxK07MOvGeNnS4VxEnp7QTKLLU2c=,tag:EtW0Buv+eE3DBEWrbhiOCA==,type:str]
+ - name: CF_API_TOKEN
valueFrom:
secretKeyRef:
- name: ENC[AES256_GCM,data:m2K5brLI0kpAASBvbNJO5r4VyHOd5yPe6fSF,iv:r4h6sEEc3GTufBKrfQLSCGI9WjEo97qoIfi4ddrrpKE=,tag:jhVz7ulOXIgFXL44RmObsg==,type:str]
- key: ENC[AES256_GCM,data:/CEIK4uacXme,iv:1keYpujMkh0n3ggV5y8BYw/Fhicn4fq3K1cGs4Zvrew=,tag:puQnSJU+7hlcA5OWM0kj4Q==,type:str]
+ name: cloudflare-api-token-secret
+ key: api-token
sources:
- - ENC[AES256_GCM,data:xnyJBNqJPozq7cRB4aL/wPg=,iv:7DDnUjv1ratB1cuuQI+8oay0vmImuUU9rGD04qcODlI=,tag:uhgir0AXSuafqYNU4kZpig==,type:str]
- - ENC[AES256_GCM,data:NFDr+WvYxj3EVGLcQehCpgE=,iv:qeyd0GtlSRI9O/J1HWu14nnZMQ6UUa1eK9m70DoMkJE=,tag:2rVvZfhrq9d6TG8Ry0UHpA==,type:str]
- - ENC[AES256_GCM,data:K/fKFNeXijfpW7Srlq42qw==,iv:ZNFp6kNowOI5RsWko3DfNiHshLggEJgD4CFaS6zGcvY=,tag:oZz+XP1AyZla0agV6msFQw==,type:str]
- - ENC[AES256_GCM,data:jEVUYySOYi391aHoXRP4bg==,iv:4/s2/81WLEN0mFBmNBeziMW6bdoUY/lj++ETaZSok0o=,tag:HIffzdcXfSUIgYBg8fUydw==,type:str]
- - ENC[AES256_GCM,data:RbdIBYv2FmMcHUxLv9RQzA==,iv:O8yop6RSq5GTGVS8daUf2w//A3o7S4YV/cWGu4QFWvA=,tag:Hq18npboIZs9udq+TAPhQw==,type:str]
- - ENC[AES256_GCM,data:xPqcV50NZ++D,iv:H+HrwKAeOpcT/wZ7A/pKdBY/+8nXnv4yMMxUcrzhw4A=,tag:LO6X/hRHFNikKd0sdPWvng==,type:comment]
+ - gateway-httproute
+ - gateway-grpcroute
+ - gateway-tcproute
+ - gateway-tlsroute
+ - gateway-udproute
+ #- service
rbac:
additionalPermissions:
- apiGroups:
- ""
resources:
- - ENC[AES256_GCM,data:PDkzu+7N1e1wgw==,iv:LOvPUgVJHiOATwocCnlzn1TrqKYA638hK+HQbOt17w8=,tag:1HpMTAydYIhvAaivOH/L7A==,type:str]
+ - namespaces
verbs:
- - ENC[AES256_GCM,data:HEiy,iv:copwR0HRYpsHe2qeSSezIPkrWnwE35QLxDtcv3R01bI=,tag:Kvyd+hcJMFD1K3HM1ABklQ==,type:str]
- - ENC[AES256_GCM,data:06O8Uxo=,iv:A7NFkg7+ZzXdQ2Z6v7OJTXL4S76IR+RZcvJuNuggsds=,tag:DdOFhhex1ACSjAZa2I6EAw==,type:str]
- - ENC[AES256_GCM,data:C1XneQ==,iv:+uZNZwDVOftKNBQuTWiM7OVmyJkqygGnpm+MtVemwu8=,tag:f6BoixDJtyNgABEw2WqPww==,type:str]
+ - get
+ - watch
+ - list
- apiGroups:
- - ENC[AES256_GCM,data:3EmmvhoYpTTeSeLgvJwv9Wcd5tTWWOqxEA==,iv:/FvwxVopElypsfeui0myJsfSzU7scAKYhHQQytgBI3k=,tag:BWN4E+71aRH20sXK+PIhug==,type:str]
+ - gateway.networking.k8s.io
resources:
- - ENC[AES256_GCM,data:n9mAWe15uTA=,iv:qdMuIE0F7asmTCPy+DCupQGvVEnYalglUA9TccXC+v0=,tag:CSvYoQnykHT1i9cyuFlaBA==,type:str]
- - ENC[AES256_GCM,data:HHG0KA9AWIJ6pg==,iv:1SxP2S/7o9PtXnoVUnH9dHq/yK65+JguS96EtI8dOyQ=,tag:9O4HXZV6M5JycHwksuqHYQ==,type:str]
- - ENC[AES256_GCM,data:YIqAeOGVPTl3hg==,iv:zfXYOtGcjqHVsShy966EmKyNd27H1TUjZ7PRUbCBQMY=,tag:biaZcivmTwclTfXZ1fxUgA==,type:str]
- - ENC[AES256_GCM,data:GNhwtXtXAPdb,iv:L1McozNiSO0xK+NPeR8yBzd0aQsOPgeEjS+PQm1T4h8=,tag:pDPIbtKOnmZFknSF8vcPaA==,type:str]
- - ENC[AES256_GCM,data:pHl0cBsL+IKI,iv:k1P6zfYjMSgXUgVXWGBQiC02Fi1ZRlPvbmICiyICS9A=,tag:O+tiD/y1BQEVq0pZ/RzCew==,type:str]
- - ENC[AES256_GCM,data:RUNGPeRqbRyt,iv:s+t8pDONtxi34iEfzlbtDRehMYTwxytQGHw0uw0evTM=,tag:LLYZyD3wrhUX45o5biNIpA==,type:str]
+ - gateways
+ - httproutes
+ - grpcroutes
+ - tlsroutes
+ - tcproutes
+ - udproutes
verbs:
- - ENC[AES256_GCM,data:Bw0r,iv:SwqS86SGdHKSANR55deB2GNlJMq2gabWx1WwU8CsJIc=,tag:sFmvQfnqpDuP+Swc+Yd2SQ==,type:str]
- - ENC[AES256_GCM,data:Oq0N3RU=,iv:TPmoUU35O4BxZ0IBLbMB//MjOynpgOJFg5sYb1xaj0Y=,tag:ZkOJF9EhpSVBnHYndFIbfw==,type:str]
- - ENC[AES256_GCM,data:GWYOTw==,iv:ZFBJc7mZrrzGkbikip64kGZJgrQtO18LkkB2ioAblJg=,tag:zrfKH2G6gwnRMYI1ckdh+w==,type:str]
+ - get
+ - watch
+ - list
- apiGroups:
- ""
resources:
- - ENC[AES256_GCM,data:E1crXcbDqSQ=,iv:JiOKhc024ZC+eMA/Tv4lK/LWRR40v3dVD/z0ARaVUlQ=,tag:Kq4m4itoxAsl8ZC8e5w72w==,type:str]
+ - services
verbs:
- - ENC[AES256_GCM,data:G2GQ,iv:2/56SfK/+ZWIvDTVoF8mt7HNTES+z4R/Pdfp1Kv8G+8=,tag:IJKMMUZqNt93+2fkBSAVmA==,type:str]
- - ENC[AES256_GCM,data:GcGpEi0=,iv:1kzFTavHG3xjhKecETmGyx35Xd7gcUv483Bhwux63Qs=,tag:Subq9HCARkpnimyGaQWD/w==,type:str]
- - ENC[AES256_GCM,data:qhuhxw==,iv:FSeT57FXMA3pGsCXi10AhpBY8zcWoVH7B58WFeDIg4Y=,tag:7LrBhn7UI4v3cN67wOGT/w==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCdmxxeUNQSEd6bm1MMzhp
- aVEydk1KUGZyMTNVMHJUZkxaZUJvMG5uZ3dJCnNWK24xMkljTW1EWGpweUJQa0JO
- MUh0a0VEeTNhOElKdlBqUFJKRm9XRDAKLS0tIFh4OFRjQnNKY0EvZ0poYm9LYzBm
- NkFhTElaMThQUVcxeUYvTXNBUlF3d0kKU9tge0xgZ+09K6kmQDmhJbRq8luMBj69
- fidmWOgR2QNQNJjwm6XyYzRzoCF25SVO08vdjz2d0cdeFtrF0BkJmA==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-11-18T13:04:12Z"
- mac: ENC[AES256_GCM,data:eIXws1Ocu++RB+AOgEgdS1z5ojI60u7SWsAKl5idjkK6GhAC77o2vHfcYRhPzKzQI1HGUwVGgUryt1RbpBNAuzh3kFF8WFpc0aBAZB3PsaBkMV33sSWM9mIoA6UTVpv9B5Cl+dCugLkcliY+Siix7UT8xec7U9JALmXxx/rsPoA=,iv:xAih3ehuFF5Dv/XU/8KKujFDUW+zBYvH/QLtmBRdhUA=,tag:XwtMx/Jpj744mUMBmzbwiw==,type:str]
- pgp: []
- unencrypted_suffix: _unencrypted
- version: 3.9.1
----
-apiVersion: ENC[AES256_GCM,data:dEqBJ0pA4n89nQv1s17KvF19B32Sv3UxnSt3mdHJ,iv:PVESyWHkF75kW23Wl+SUHWkfe/K/cTme9oYnZySmDmA=,tag:3bGWaXfzwKO/fqabHybnRQ==,type:str]
-kind: ENC[AES256_GCM,data:3yR/DOpxlsMnS0I=,iv:NMG8ixVUhax9LzT6HvNberbj+FSU0OAh3G3Qp5V+ETM=,tag:QnfQWPJd9ldK/iHo/T158w==,type:str]
-metadata:
- name: ENC[AES256_GCM,data:8JtalwFkQXdWVvbTQRgkXKQ=,iv:oqIMfwYWFOpQJ3rX2/gNEvnQ0wMvvttXGi+t7EgWOeA=,tag:Eu3v7A2CBaqmoFA6NhYtGg==,type:str]
- namespace: ENC[AES256_GCM,data:6bfSSVKPk3kW/p4=,iv:WlHWvke3smGk3SaI1vugdziL92GDVPeFp6iC0no3YT8=,tag:wudh0p37niywAbQ5wUwScg==,type:str]
-spec:
- releaseName: ENC[AES256_GCM,data:GDjyOakjI3jkKPWbx1Wm0Gg=,iv:4eeQ+V6k6GHn/mH2H5I6iyGcdKf+UK7K0opMUy0bv8Q=,tag:92FnvkAhJtSQd75DUSRUkw==,type:str]
- chart:
- spec:
- chart: ENC[AES256_GCM,data:WvKbnppqhebvI6eM,iv:qSdNKlbcmONTvbTfVdfWKLM7rYWPSLiKXlwZ9HW3oKA=,tag:prk2S7hPd8z1nTLKTjHmdQ==,type:str]
- sourceRef:
- kind: ENC[AES256_GCM,data:pr1CY7h3uscSVTf2sro=,iv:/rxk1k3lWcYegY15lrOQVySkYh5ayyubsc9bPMZIpuA=,tag:1RkhfDpBkpFyIfh7Y3GJgQ==,type:str]
- name: ENC[AES256_GCM,data:nDL1grFAv6YLhmOO,iv:UC7rvWA88cI3j5F/BxvMVhJl7cT0kQbi5iUM638grV0=,tag:ozVBZWnp5UCY+3uYeHabSg==,type:str]
- interval: ENC[AES256_GCM,data:z4qG,iv:1jJTSYMURudrH98bYoR9406Mzne6nPEmtxg9v+V7INA=,tag:TL1pYOdon2PQb1MY1G1jfA==,type:str]
- values:
- logLevel: ENC[AES256_GCM,data:h9OeuJM=,iv:VDl7oZ5QBEwaXkQBI2BHGuluD4SvblrE/fh7kZSoRL8=,tag:T2HzjUJAXi5db4mxiSbjbA==,type:str]
- extraArgs:
- - ENC[AES256_GCM,data:vJXKXXG1lzsqeDG2NwirrCA0m5XVNb0sAO58wIl1,iv:OdB2glU8biZ2ata++lcNuN+7eiDMGUAz2ceBVV382j0=,tag:FUV4LsPyLniyYzSKoYydkg==,type:str]
- - ENC[AES256_GCM,data:NkeYnDrRC8JF/1v9UoggQlqJ7uv7zeDuyt54q0k4UNpymmy88jE/3iZ7+74Z1g+ss++P/s/bSL0uKoZv1aqHhEakly4yo8TsEQ5QQ81l4A==,iv:yxaU+maPbSGgeOtODvK0v/0EM0we8Ag9i1FSD+qxvMg=,tag:pSm95DicFkdHSsF222U7dQ==,type:str]
- - ENC[AES256_GCM,data:tqfAjNOyELmMXf15k1VaVJ+PvM/yHWKujClBrzYfyg==,iv:RxJoV12RquCkVgrAKbBMMxk/FL13YrtwbeN5fSWwjzk=,tag:JxWQsRszbc1WsmFRBp35hw==,type:str]
- provider:
- name: ENC[AES256_GCM,data:YCNQNw==,iv:YNldxHe0DCkD+TT2Fv6oYI0VkfAR8OZ9QZmXzQ+JvmY=,tag:PVaIehSPYa4VUQ9vvfh0iw==,type:str]
- sources:
- - ENC[AES256_GCM,data:nX/qxbCqjQakF9p0McgMN5o=,iv:KnGYzFNz5lGtaNysr15d6L22BQvyoHM4PfuhqVTXslg=,tag:XmvhrTb6Zz31Al0uAiE/QA==,type:str]
- - ENC[AES256_GCM,data:QcmTCukrSOxuS9cZKFeUyOI=,iv:mqVofTZZk5vN0XCYJl3vjrZXBsiAe3YFz1Xl98QyqwM=,tag:S+V5lz9+oT4/RNFOo38yDQ==,type:str]
- - ENC[AES256_GCM,data:KaUC6Juv6HmIfydTtAeUWQ==,iv:cXjrNH6eB/0a0rBI9FyK3UZDI4GKAStymXjHaT5ZpJ4=,tag:A1vpa9BLkLxpDP5gYZntYg==,type:str]
- - ENC[AES256_GCM,data:6skGZLf5QXhENWFPfHplHw==,iv:3cjRMffWpQJeiH2GL4d5yWA6OioWIJr1rHLMfs8Fr5g=,tag:2uW2ALe478Q7tu7zKDFFcw==,type:str]
- - ENC[AES256_GCM,data:wa+llmNNUbf6BIBrlzShIA==,iv:ufqBgmZEHF+PCMAbGhfSmq+KzwNkAd7JJ2DzL4p5YGY=,tag:iViiRS72V1KhoPKB2OjxTQ==,type:str]
- - ENC[AES256_GCM,data:DP08hw6IbSgw,iv:oWL3ZKYM0z44M0QiatphKjdbh76AU1vk358RoOAbdRY=,tag:6JSIm8BPE6+CYoEEDa9wKQ==,type:comment]
- rbac:
- additionalPermissions:
- - apiGroups:
- - ""
- resources:
- - ENC[AES256_GCM,data:wm1IQ+WjI6/tIA==,iv:QWK837PzabM4pZvoPOFoUg/rYreoqeJxyNg9bufQrr0=,tag:a4wCdZfA+UCBEKZ/BD8IzA==,type:str]
- verbs:
- - ENC[AES256_GCM,data:p0oo,iv:N19CNP8ubfJog/6HFDFUeNojFnVx64nsE3ns8V2IQuM=,tag:nOSJwMj0SiWBhM8fVjJNGA==,type:str]
- - ENC[AES256_GCM,data:8SjGxNQ=,iv:B0azBJWKO2B335e7VIiBcd7RKoXwGlJEG3RR2YmbzXo=,tag:pYrFxvO8XS4qpVhSVPPuXw==,type:str]
- - ENC[AES256_GCM,data:eb1QZg==,iv:CarMwbXofj629RdTyAcdd8paRt5jgynW1VM+W6OCIMI=,tag:HyIwS5JWgoKZkMmLZDgjAQ==,type:str]
- - apiGroups:
- - ENC[AES256_GCM,data:4BQFDNmD0FqCr/jWLJcUcUo0joC2LbFw/w==,iv:2X6R2yCyY/xGHj+92e+kv7t+bC0wirQAB5oai0wEHfo=,tag:fBuB79CK/gYbreA18FHfrA==,type:str]
- resources:
- - ENC[AES256_GCM,data:OnmL2/5WS7I=,iv:9vDT+ZjiZATL2vCUdgQQ0MZdalWFXW/FA0RyzsciC6U=,tag:DWRB00+kFtdRQ5BGnZZcEg==,type:str]
- - ENC[AES256_GCM,data:hzh412LvuagtOA==,iv:xNJIgOXMzruXHY/DmoNl8/l4xqB8vni+yfwstDuMCwY=,tag:9i07LO3xe92TZUSowIDrPA==,type:str]
- - ENC[AES256_GCM,data:vEQDMlrzciANog==,iv:AW1CjtW7pAk5HfOeKOtUY7wJckKawMDoF3/U5bw7mUs=,tag:cg3MJ2qzKpEA5YjZMpjPeA==,type:str]
- - ENC[AES256_GCM,data:FEGNi6HAq2Xi,iv:4ZjoAFA8VlOXLBX2zzF+A9P9G58VbTenToJJXXmnWyQ=,tag:apYlru0PD+0X3mBS4k5ghQ==,type:str]
- - ENC[AES256_GCM,data:ndoIdEQt7FiU,iv:b0MRqZEQYSRGraC/babnBRN4qbvAI1IC3s2fHq+jHbo=,tag:Sknoku51cd9/iMTFyrR5jg==,type:str]
- - ENC[AES256_GCM,data:4iCPOT4QTDDE,iv:wFWGVXJJY48hWo6Nln9OskMLVSI/BorU9LoIrr9R3vc=,tag:5d/19rmFxBJSgZ+rA8pb6w==,type:str]
- verbs:
- - ENC[AES256_GCM,data:fXw2,iv:VKmxk7w7TiNRmuqDJlBfGDtGjXNBxUNBtNkDMMh5KcM=,tag:p1FcjPEon54yWmdWOvUwrQ==,type:str]
- - ENC[AES256_GCM,data:L3QtYjw=,iv:NPr5dm5JRRFfeHnN4FUeWY00Z2Ug0c3Q92zPlsH6QIo=,tag:C0SAQ4lSyhkgrQNLkA7Eeg==,type:str]
- - ENC[AES256_GCM,data:yKl8qg==,iv:2x9zzc0q25c/IAHXkvR69wj1A9GqH6F6bckhAGS1luU=,tag:byoqGXFXSA0h5EEAP5JW2A==,type:str]
- - apiGroups:
- - ""
- resources:
- - ENC[AES256_GCM,data:Stu6i+RHD/I=,iv:S6/KnSttl7NgYzmTQV4yWTUl4RsCRoUKDetpNRqdN6c=,tag:OTbXdCmhuXZ3qG8Men5Ygw==,type:str]
- verbs:
- - ENC[AES256_GCM,data:KC6g,iv:l9jJL8OYXbl92r4MpgzW1+URrp0eM62e0J44ngY9zTg=,tag:REiFeap3wAoki7jGizCVcA==,type:str]
- - ENC[AES256_GCM,data:ji5lhu4=,iv:wvfx/+JLzL8zw5JQ20PZlhKDPD6gvDWknJysPhV+0M0=,tag:xT4bZv9yhUvbUKzYQU7LyA==,type:str]
- - ENC[AES256_GCM,data:4m+2kA==,iv:5H9x1y6tZe1LzXKr9SShWYT5cTLFkyN/EUEMzRub2pI=,tag:Ue0XURhuyipUp2LPSYF90w==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCdmxxeUNQSEd6bm1MMzhp
- aVEydk1KUGZyMTNVMHJUZkxaZUJvMG5uZ3dJCnNWK24xMkljTW1EWGpweUJQa0JO
- MUh0a0VEeTNhOElKdlBqUFJKRm9XRDAKLS0tIFh4OFRjQnNKY0EvZ0poYm9LYzBm
- NkFhTElaMThQUVcxeUYvTXNBUlF3d0kKU9tge0xgZ+09K6kmQDmhJbRq8luMBj69
- fidmWOgR2QNQNJjwm6XyYzRzoCF25SVO08vdjz2d0cdeFtrF0BkJmA==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-11-18T13:04:12Z"
- mac: ENC[AES256_GCM,data:eIXws1Ocu++RB+AOgEgdS1z5ojI60u7SWsAKl5idjkK6GhAC77o2vHfcYRhPzKzQI1HGUwVGgUryt1RbpBNAuzh3kFF8WFpc0aBAZB3PsaBkMV33sSWM9mIoA6UTVpv9B5Cl+dCugLkcliY+Siix7UT8xec7U9JALmXxx/rsPoA=,iv:xAih3ehuFF5Dv/XU/8KKujFDUW+zBYvH/QLtmBRdhUA=,tag:XwtMx/Jpj744mUMBmzbwiw==,type:str]
- pgp: []
- unencrypted_suffix: _unencrypted
- version: 3.9.1
+ - get
+ - watch
+ - list
diff --git a/apps/talos_cluster/externaldns/release2.yaml b/apps/talos_cluster/externaldns/release2.yaml
@@ -0,0 +1,80 @@
+apiVersion: ENC[AES256_GCM,data:8Gol8f461RVNRAYFcmfHwsho7j16GHgft8hRqm1H,iv:LJiKFukwojhHd4MOh45buM2P7LuXtav3l2oBCG2gJzk=,tag:wOdByARjbGy+KfjphmB10w==,type:str]
+kind: ENC[AES256_GCM,data:vvktUnIaN7xa084=,iv:MZ8rbA/QECDf3XHgmKbvZdYhNugPvLOAt2hRfN7gIDU=,tag:rWh0vB/n0K0hTp530zBvVA==,type:str]
+metadata:
+ name: ENC[AES256_GCM,data:BeibHSbTfDKUAIVCHxxslNE=,iv:W5Z2Ik2SVzeKFMD1sdu6x36IPx9ENZehhmgu9OA1/08=,tag:Q5BWxdSg2m0Dx67A6pX05A==,type:str]
+ namespace: ENC[AES256_GCM,data:b1xiHY+ulan1N7E=,iv:A2TAX9Ao6zJtEkVZ/8jcgSuyoLy+AiznnPmxWXR9P0A=,tag:b0f7TSQCBOGXUvS19ervlA==,type:str]
+spec:
+ releaseName: ENC[AES256_GCM,data:ev6jxiLrrhFapfpa29knq1g=,iv:JbdyuLLsQzMDhTQeThrHprFWOdRcgpKmA4pMr2yl3bM=,tag:8XnCa8PmNjMf1QIuJwEUhA==,type:str]
+ chart:
+ spec:
+ chart: ENC[AES256_GCM,data:ezy2x8CUT00XQ0rD,iv:ITysRxXPUs37i74yxPa2kAIY5rgzUKHEQFvggI7tLzs=,tag:cpLkpbGT1LXJei66ifSy3A==,type:str]
+ sourceRef:
+ kind: ENC[AES256_GCM,data:zuq2FCgEJ7okDEA/Gj0=,iv:/tmr3nCL4nr/1GNQe7x3skkyJSRxw6S3zj0hp/0Jr9Q=,tag:N1fFtJnPsOPxInVfivwB+Q==,type:str]
+ name: ENC[AES256_GCM,data:U5504Oo6FErMsDIP,iv:0beuW59y/cKyzC3ynRgncqXaJjYDIdIu5nDv5dF+Il0=,tag:PcizrfwLri+yzLuxv7xsTw==,type:str]
+ interval: ENC[AES256_GCM,data:oRG/,iv:LZ6GF2uA9+2OapLAt4wxzMmZ7QYRkXAmEZWqYHYJq7Y=,tag:cBP70XlefSFrM0LA22iX5Q==,type:str]
+ values:
+ logLevel: ENC[AES256_GCM,data:3rMX8Qc=,iv:RuWgP8YOvsgu0cnStu8klwJXTr1FCXHzpUD1a/GGObE=,tag:hDb7qes7vW8kw/GOeHbtrA==,type:str]
+ extraArgs:
+ - ENC[AES256_GCM,data:hqO6wjfxePTaHwNjTGxzunzKb6G9TWun+xnoPhP1,iv:KpTO8dZyTidoJqqdfGBfGCGxCyPFcdURScR6aupZXFw=,tag:Rw75ws01+qF2sR0fnxSHgw==,type:str]
+ - ENC[AES256_GCM,data:Z9ymf/+dsEO1v5zmZySO5My64SMCF/8OonwxiFSBnSSvLYsUZSdQWST52YZupnT7w0VXP7F/mOjTWY9kfAnSdiAOHNtf8RCf/uecyRJrJA==,iv:T8udjLySD+3r6cg9GhNmVIUafqJHf1EqjKIgenK7gZ8=,tag:xN5wnJI64Vvincd76Lr3hw==,type:str]
+ - ENC[AES256_GCM,data:e1AcolwT4lTriQiEUoqyc6i0sIgsYcFqSDDXtDQhcg==,iv:GhKqdBts1u6ljr5dYvMxmUNvFuhglg6hMNAjxKWTJt0=,tag:fkPgtFS+V5DMRncpRMq5gw==,type:str]
+ provider:
+ name: ENC[AES256_GCM,data:CDKtHg==,iv:6ddxllcqtUY7Y5RB6cjESAjBSnkn2RKsH3wMVodUW24=,tag:yieLYTmX5R6kdKuII02w3A==,type:str]
+ sources:
+ - ENC[AES256_GCM,data:5MWnDFhzRz/cjGK+GJHR63Q=,iv:1R26m9POzOhpO1QrYyMqRcln1m7Pnhzq7ClnFiVV5Lk=,tag:/+Zw2UYglfHwzHwB/9W9yA==,type:str]
+ - ENC[AES256_GCM,data:jheep6KQFAOpNBxah7H5Q+Q=,iv:E6QL1wJktwISreETPRL+sX82bDvUtjfIzXSnssvmnqA=,tag:pNJYcfj/fhe94SIuS1uHIw==,type:str]
+ - ENC[AES256_GCM,data:NlBiCXFeoWQCPf4s2Q0+vA==,iv:dKtIBsa5Q84ODtTVO1Z3NROx3In0LP3jet5+shhGi9Y=,tag:QosIoJgqf/i9HQ2crMO9jQ==,type:str]
+ - ENC[AES256_GCM,data:6mjKbtTohZ+4GI0yV0K0Vg==,iv:QlVqP/PJvkFKf2ydo1o8w8SKM3bLWdAnZuwSX40fU5g=,tag:IzvjKUcgGY9fborU5dIJNw==,type:str]
+ - ENC[AES256_GCM,data:hFkX4jTDTxytFo3ArULx6A==,iv:/oH6bMg2Y7gMjuF7lHF8YtR+0h4GmrtruRbMd6NgeZI=,tag:UEfnVkstRWLpwx9bxi/7/A==,type:str]
+ - ENC[AES256_GCM,data:0cKdUrlFZZ7v,iv:Ga+GTFnADO8nSs/eJqx9mugQ+f6M0ZYBKc+RHZRZuak=,tag:HHlP6LhLymRyWlg6aGc3cA==,type:comment]
+ rbac:
+ additionalPermissions:
+ - apiGroups:
+ - ""
+ resources:
+ - ENC[AES256_GCM,data:CBa7oG/hJ1Btmw==,iv:eW35p58ORA8BeEfkyR2lAjf7RTaAuvhyWhjM5wSMrLI=,tag:2KdZ6JIXS+kOtX1DKMn5FA==,type:str]
+ verbs:
+ - ENC[AES256_GCM,data:+zFp,iv:rLyN/q4od7+49DuIqYC/2BnTemqHZ2NpDk5F3EPMss8=,tag:uHBq8SFzQZI/rzEijdEbUw==,type:str]
+ - ENC[AES256_GCM,data:/GbFMUE=,iv:3c575XogxqaZBUvIpyPD+IiOOnVhbMhOt8o7A9R6wfw=,tag:tqXBz8cwdhUZIdUTQa3vkQ==,type:str]
+ - ENC[AES256_GCM,data:F1QWjA==,iv:iZ5SP06cHyuDXSmt0x6CqLarOmZP4qUUYTkPJ/2pANk=,tag:OsvbByh94MIdimIhbAmj7w==,type:str]
+ - apiGroups:
+ - ENC[AES256_GCM,data:j31s7MHg34SsliqXJAy0ZSrIWvjUufjtjQ==,iv:DIO8my+qLXZhn54WO5DEK8M2werc93szLA3sidNOIm0=,tag:2s6635CJK0/1AfauHRnCcw==,type:str]
+ resources:
+ - ENC[AES256_GCM,data:Ug6UGBQ54YI=,iv:vGW2zzI+J0CfHdwz0NoQRv27D+jL6bRNjovvHneIpi4=,tag:FOc1/+rU1edwz8cs31IzCw==,type:str]
+ - ENC[AES256_GCM,data:G9JWA/bfNp9Tow==,iv:NTQcHNxcDExuiICXEoW2yI3NneFfCmgKzDIE23Ak5aE=,tag:TYuMXgd5Q2ZQoI02riElJA==,type:str]
+ - ENC[AES256_GCM,data:0ouCxFKgBgT9dA==,iv:tG76AEb8Hy0Xif2l0attNlJAmgzELFJQ3KXW5RgFDhE=,tag:qc1cvXhJeuA0jCLOtEaC/g==,type:str]
+ - ENC[AES256_GCM,data:nlyv5ThTv9zc,iv:c4ChfOI0Mm+2YNfgHLMmskT7y1/Ld75rgEvBQMLTEc4=,tag:ZDKM/U9IRIIxdqxu5CsaAA==,type:str]
+ - ENC[AES256_GCM,data:HoQpyc5O4SW/,iv:pouQAW8OKKRRKj04tgHVqvMV+h+HIVfF2T1VuhSoT7k=,tag:0IwnBJ9UGYxhTll+Y2OeRQ==,type:str]
+ - ENC[AES256_GCM,data:/0apJqCdYP/7,iv:1DMpBdaohmSY8/TugdwB8nQhJ6I94984+TdbyufpbI0=,tag:jzCl3BWHF1zUPYR8zdHhfA==,type:str]
+ verbs:
+ - ENC[AES256_GCM,data:c2ef,iv:ZLCALTlJZ2OlLom5QDl5RK2REM5KYu4gU734sE/K4rs=,tag:ColGyUuBIRgNyWuFXP5CEg==,type:str]
+ - ENC[AES256_GCM,data:l5pnipw=,iv:6uFFI5mh2sQna6WblN+qM4R6Lqen0F5/OxsOPJ0Ma3E=,tag:UOEsAoX5QX9Msd8RUsw9rA==,type:str]
+ - ENC[AES256_GCM,data:IxIXUA==,iv:xDpiccHlVn2CYhIHahKugOHO8HYUEArCwGnH1pKuZHs=,tag:/fbuyfLqbvRE2nrlBUVtwQ==,type:str]
+ - apiGroups:
+ - ""
+ resources:
+ - ENC[AES256_GCM,data:WpfA7qMhpkc=,iv:rVD6KocMC9296tS9svuFjn12gvhBbMIh0uRKQJgUlnw=,tag:TKbrvcjETzVfcyR4lRSycw==,type:str]
+ verbs:
+ - ENC[AES256_GCM,data:ah9J,iv:owRHEyLeIB48ry+IX2AlJ9TUGs4ZX7q9Yxu4gm6ocvg=,tag:UAtDtWkdiswsvyNFI1sTWg==,type:str]
+ - ENC[AES256_GCM,data:sJGI6Ck=,iv:0XOOiMJy+PjvXneDuRMKVTRFMrnjqfWGLRk/PRAEbOo=,tag:NZcyD1FeHINUOkTHxmPYzA==,type:str]
+ - ENC[AES256_GCM,data:+6uFTA==,iv:hbwQBRnjhWOUs1tavmQ7g7EWyg1KaQZd7b8s6TMpVZg=,tag:6X1O2H97fJxUkjJunM123g==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSU2svRHZsWGlhSDlTeXgx
+ N2NoQU50QWdBTmtIWDV6akYwdnRhMzN0VFV3CnhWeTZrTVJuOVhuQnpXc0FmMTNR
+ bFYwUlFLTXY4eTZkZ2Y0ald4WFpwR0UKLS0tIDdPNUZTV3NFczl2Yjk4MnhqSHh6
+ WHhaQ3g4ZUZVc056SDNuYUt2OGFYTFkKzhnHVUycsg208Msu6lgO2oPXRF9AF7uI
+ cD+iqD7o+R3sXwUCFrJ4OAXN7nd2fa9QqBcmUa3ss/KgXpVx1a7mcg==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-11-18T14:17:37Z"
+ mac: ENC[AES256_GCM,data:MygF1qFXPUWV7Y9Q08dSvd25OXqLQYuH6mEKVmhk5+HB8f+h7zcaQIWnFyfEU0uE/g6sOhYB1UwF9iRgq9AgYGQsUNt7hcMSNYYY6vY6z9KfR5f+GxDwp4jZ+tBZNUZpa/FQ9J6N7yI8SQSmtQH+hqjM7vWSgfLvkJg7MWbGwyw=,iv:BNj/R/XqzOp++/smeVaYoycMWvACVMVvYlTFJejcN/c=,tag:My0qCJ8RmqsUOvsTcv30DA==,type:str]
+ pgp: []
+ unencrypted_suffix: _unencrypted
+ version: 3.9.1
diff --git a/encrypt.sh b/encrypt.sh
@@ -6,6 +6,5 @@ sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh \
--in-place "$1"
# Encrypt apps/talos_cluster/externaldns/release.yaml as a whole
-sops --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh \
- --encrypt \
- --in-place apps/talos_cluster/externaldns/release.yaml
+#sops encrypt -i --age=age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh \
+# apps/talos_cluster/externaldns/release2.yaml