commit ee1e3a3746f9e27b57468e067e603239cd026219
parent 876613e8c4a0637aa23ad989e849eac8206b52fc
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Sun, 1 Mar 2026 08:23:13 +0100
meow
Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>
Diffstat:
1 file changed, 131 insertions(+), 39 deletions(-)
diff --git a/infrastructure_talos/controllers/longhorn.yaml b/infrastructure_talos/controllers/longhorn.yaml
@@ -1,52 +1,144 @@
apiVersion: v1
kind: Namespace
metadata:
- name: longhorn-system
+ name: longhorn-system
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXOGd6L1p5U0FYKzUya0da
+ ZUNNSkxtaEFwSUJzQjV0QTAxQzQzTjFYL1djCnpNRnhGUHBVRHBSL1RQaWFQcGtP
+ T09pRXc1SnBIWDBJY200RHB2d2tFN1EKLS0tIGg5ODZ3U0R2VmFwc2xZNERMQW9D
+ ZEJoQmhhdjFGU21PV3U2aXRUSHROOVEKutWxnUscOaGw3n3aniAQX9z3wjmsTUwk
+ ECSvGzHDQShZkm8WXAS82OjbP2LJgtW+Ci8o2RTZDZFAl2WXRX4rww==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2026-03-01T07:23:09Z"
+ mac: ENC[AES256_GCM,data:IW+bk70jRwP8qbWF5U+RrXJLGwO9KtAksTLwtY3wN16XKdev0LQAQkY/P/SzFk208oTj+IToA4MrMl08afnTJyYYjDbqNFL3a7Qf/bLs4pvhWKk1IklABpxQqYojz+JKvAsb0hYnAUsupfCwkyRBg6FmEqNFQZTf8TqzazyySxU=,iv:Vu3F/4OaeX+l45IwH9R/nftRwcd1faUBne+6GBJWz2Y=,tag:0RTiH88yMhDcd/elFIt8DQ==,type:str]
+ pgp: []
+ encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
+ version: 3.9.1
---
apiVersion: source.toolkit.fluxcd.io/v1
kind: HelmRepository
metadata:
- name: longhorn
- namespace: longhorn-system
+ name: longhorn
+ namespace: longhorn-system
spec:
- interval: 24h
- url: https://charts.longhorn.io
+ interval: 24h
+ url: https://charts.longhorn.io
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXOGd6L1p5U0FYKzUya0da
+ ZUNNSkxtaEFwSUJzQjV0QTAxQzQzTjFYL1djCnpNRnhGUHBVRHBSL1RQaWFQcGtP
+ T09pRXc1SnBIWDBJY200RHB2d2tFN1EKLS0tIGg5ODZ3U0R2VmFwc2xZNERMQW9D
+ ZEJoQmhhdjFGU21PV3U2aXRUSHROOVEKutWxnUscOaGw3n3aniAQX9z3wjmsTUwk
+ ECSvGzHDQShZkm8WXAS82OjbP2LJgtW+Ci8o2RTZDZFAl2WXRX4rww==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2026-03-01T07:23:09Z"
+ mac: ENC[AES256_GCM,data:IW+bk70jRwP8qbWF5U+RrXJLGwO9KtAksTLwtY3wN16XKdev0LQAQkY/P/SzFk208oTj+IToA4MrMl08afnTJyYYjDbqNFL3a7Qf/bLs4pvhWKk1IklABpxQqYojz+JKvAsb0hYnAUsupfCwkyRBg6FmEqNFQZTf8TqzazyySxU=,iv:Vu3F/4OaeX+l45IwH9R/nftRwcd1faUBne+6GBJWz2Y=,tag:0RTiH88yMhDcd/elFIt8DQ==,type:str]
+ pgp: []
+ encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
+ version: 3.9.1
---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
- name: longhorn
- namespace: longhorn-system
+ name: longhorn
+ namespace: longhorn-system
spec:
- releaseName: longhorn
- targetNamespace: longhorn-system
- interval: 30m
- install:
- crds: CreateReplace
- remediation:
- retries: 3
- upgrade:
- crds: CreateReplace
- remediation:
- retries: 3
- chart:
- spec:
- chart: longhorn
- version: "1.10.2"
- sourceRef:
- kind: HelmRepository
- name: longhorn
- namespace: longhorn-system
- interval: 24h
- values:
- defaultSettings:
- allowCollectingLonghornUsageMetrics: false
- kubernetesClusterAutoscalerEnabled: false
- upgradeChecker: false
- networkPolicies:
- enabled: true
- type: rke1
- persistence:
- defaultClass: true
- preUpgradeChecker:
- upgradeVersionCheck: false
+ releaseName: longhorn
+ targetNamespace: longhorn-system
+ interval: 30m
+ install:
+ crds: CreateReplace
+ remediation:
+ retries: 3
+ upgrade:
+ crds: CreateReplace
+ remediation:
+ retries: 3
+ chart:
+ spec:
+ chart: longhorn
+ version: 1.10.2
+ sourceRef:
+ kind: HelmRepository
+ name: longhorn
+ namespace: longhorn-system
+ interval: 24h
+ values:
+ defaultSettings:
+ allowCollectingLonghornUsageMetrics: false
+ kubernetesClusterAutoscalerEnabled: false
+ upgradeChecker: false
+ networkPolicies:
+ enabled: true
+ type: rke1
+ persistence:
+ defaultClass: true
+ preUpgradeChecker:
+ upgradeVersionCheck: false
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXOGd6L1p5U0FYKzUya0da
+ ZUNNSkxtaEFwSUJzQjV0QTAxQzQzTjFYL1djCnpNRnhGUHBVRHBSL1RQaWFQcGtP
+ T09pRXc1SnBIWDBJY200RHB2d2tFN1EKLS0tIGg5ODZ3U0R2VmFwc2xZNERMQW9D
+ ZEJoQmhhdjFGU21PV3U2aXRUSHROOVEKutWxnUscOaGw3n3aniAQX9z3wjmsTUwk
+ ECSvGzHDQShZkm8WXAS82OjbP2LJgtW+Ci8o2RTZDZFAl2WXRX4rww==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2026-03-01T07:23:09Z"
+ mac: ENC[AES256_GCM,data:IW+bk70jRwP8qbWF5U+RrXJLGwO9KtAksTLwtY3wN16XKdev0LQAQkY/P/SzFk208oTj+IToA4MrMl08afnTJyYYjDbqNFL3a7Qf/bLs4pvhWKk1IklABpxQqYojz+JKvAsb0hYnAUsupfCwkyRBg6FmEqNFQZTf8TqzazyySxU=,iv:Vu3F/4OaeX+l45IwH9R/nftRwcd1faUBne+6GBJWz2Y=,tag:0RTiH88yMhDcd/elFIt8DQ==,type:str]
+ pgp: []
+ encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
+ version: 3.9.1
+---
+apiVersion: v1
+kind: Secret
+metadata:
+ name: backup-secret
+ namespace: longhorn-system
+type: Opaque
+stringData:
+ AWS_ACCESS_KEY_ID: ENC[AES256_GCM,data:2hpBMrT03VWbss+riB7On4ILrxY=,iv:R0FlUgdhKgVr5JLqBVmmUpOtSUZgyERI6CyFUOkCKt0=,tag:jQcQ8kIvTVuo1RrESXLVmQ==,type:str]
+ AWS_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:0b5FFcW1TCxkRXh+DBvyTUotlAkijH1byc9ZlBcXpCkXTQJOhq3W/w==,iv:7laWGOHM4FC3HJdIA/ZaUNKgLx5Zqn+u6wEQ+A3N540=,tag:ydUoaURroB4Fe+jt7IlgJw==,type:str]
+ AWS_ENDPOINTS: ENC[AES256_GCM,data:hXkKLg6TwZM4IM6x4aIrzK6V+wmeZZA0exAUIiMbJlHZFhA=,iv:30HsBK6t+xJzZlOMMSRLVWBBWWAHX1pD8TingwNRYXI=,tag:hKnnD7Z/24wgNJrwVOxwhA==,type:str]
+ VIRTUAL_HOSTED_STYLE: ENC[AES256_GCM,data:+xVAJg==,iv:DsmsnTdl0Lb7sLJM8Cs+McWaG6xn5PuJDL2cya1h9x0=,tag:N5vRGXUUJ8rBrjzUow66Ng==,type:str]
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXOGd6L1p5U0FYKzUya0da
+ ZUNNSkxtaEFwSUJzQjV0QTAxQzQzTjFYL1djCnpNRnhGUHBVRHBSL1RQaWFQcGtP
+ T09pRXc1SnBIWDBJY200RHB2d2tFN1EKLS0tIGg5ODZ3U0R2VmFwc2xZNERMQW9D
+ ZEJoQmhhdjFGU21PV3U2aXRUSHROOVEKutWxnUscOaGw3n3aniAQX9z3wjmsTUwk
+ ECSvGzHDQShZkm8WXAS82OjbP2LJgtW+Ci8o2RTZDZFAl2WXRX4rww==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2026-03-01T07:23:09Z"
+ mac: ENC[AES256_GCM,data:IW+bk70jRwP8qbWF5U+RrXJLGwO9KtAksTLwtY3wN16XKdev0LQAQkY/P/SzFk208oTj+IToA4MrMl08afnTJyYYjDbqNFL3a7Qf/bLs4pvhWKk1IklABpxQqYojz+JKvAsb0hYnAUsupfCwkyRBg6FmEqNFQZTf8TqzazyySxU=,iv:Vu3F/4OaeX+l45IwH9R/nftRwcd1faUBne+6GBJWz2Y=,tag:0RTiH88yMhDcd/elFIt8DQ==,type:str]
+ pgp: []
+ encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
+ version: 3.9.1
