commit f0a9c8c347c895b35e7903b30718e3079e9d2ec3
parent 56be84d33f5d83d89ef17b783a58e83636e4d7f1
Author: MTRNord <mtrnord1@gmail.com>
Date: Wed, 19 Feb 2025 15:22:37 +0100
Migrate authentik to HTTPRoute
Diffstat:
3 files changed, 121 insertions(+), 57 deletions(-)
diff --git a/apps/base/authentik/release.yaml b/apps/base/authentik/release.yaml
@@ -25,7 +25,7 @@ spec:
repository: ghcr.io/goauthentik/dev-server
tag: gh-version-2024.12-arm64
authentik:
- secret_key: ENC[AES256_GCM,data:ZZ4qvaLE1M00xOWloL5wv0Q3iQxsgTeEM9r4giE2DL0mpb6TNmurpYG/4PRQDlR7IGE1wP3hqf5LBfYAp+OZSg==,iv:OxtzLDYcQ3jjfwVLhMd56UosiB73qRjqts+C0KYFfvs=,tag:8bU4tVIcvIf+mP3HTjx+7g==,type:str]
+ secret_key: ENC[AES256_GCM,data:Qq1S+Kk6yb//WVc1sTmoIu1DO4ejWlVpg4mqYCA8+kNuc/KloUUQP33tXRGYQIlePE6ykyeqctje9h1CHND9QQ==,iv:KjCWOBFelR08Bm4n8f7FsicFNBw7gzZ1MQ9yLwh6j0s=,tag:93XCTQjxJu28uhpSayM1EQ==,type:str]
# This sends anonymous usage-data, stack traces on errors and
# performance data to sentry.io, and is fully opt-in
error_reporting:
@@ -34,7 +34,7 @@ spec:
host: pg-cluster-v2-rw.postgres-cluster.svc.cluster.local
name: authentik
user: authentik
- password: ENC[AES256_GCM,data:iNrCWxtcRTCUaAkbAjqXi9EgwTgbO5UrZqpQuDKaQyq0ekro2AGpUOhEKx40cQ8yZX3DYm+vJe3YbCbREkze6g==,iv:ayGxhTXixlvtzpLqHWyGn/p3PumA7Ecmu7Z9rK5aW6o=,tag:F9t/7PXbA6WRL8Jvu3TiiA==,type:str]
+ password: ENC[AES256_GCM,data:7qmIA2GYyHyR8/aFK75qvDb1Ndd+OfHwGfAQP/XLCEm8/6ocrVQhotkfS3XX5JIStZXRsvohZD5VZ9j1ShYILA==,iv:bwNic3q8ZW1oMhmL80Dg7KdZ59bdu/tQvIRiwvZZ2m0=,tag:TAFMjzlJnyKS/drf69EMOA==,type:str]
email:
# -- SMTP Server emails are sent from, fully optional
host: mail.nordgedanken.dev
@@ -42,7 +42,7 @@ spec:
# -- SMTP credentials, when left empty, no authentication will be done
username: support@nordgedanken.dev
# -- SMTP credentials, when left empty, no authentication will be done
- password: ENC[AES256_GCM,data:9SyHrU90FqyJ,iv:EU8net1Z0eNi7ls0Wrr/2yWXvtsSdIHf4WK7u65o9Hc=,tag:jpWttbP1TCELs14CB80tcA==,type:str]
+ password: ENC[AES256_GCM,data:ShLG8GLcWjiA,iv:Pb2jXjIqlELaCFshqscNGsXUCp056sZbfCvc3jEOJwc=,tag:kg4PWpf5nOtzI+2R9ahV2Q==,type:str]
# -- Enable either use_tls or use_ssl, they can't be enabled at the same time.
use_tls: true
# -- Enable either use_tls or use_ssl, they can't be enabled at the same time.
@@ -67,7 +67,7 @@ spec:
volumes:
- name: ldap-cert
secret:
- secretName: ENC[AES256_GCM,data:jezDqAKhwduZ8XCvOcE=,iv:bbixvEeCnAbnE/4draV0dQHyYHrDc5fIWngDYryCJIE=,tag:achnscHtpdmKXuNbkC+JsA==,type:str]
+ secretName: ENC[AES256_GCM,data:gkdJ6ufGzmE8UIrtR/Y=,iv:ajE/NG7B17OqHu5PVtI+STkiJQA2ZTv14yfWe9TZlNw=,tag:Pyz5nG4skc/vgMl5gg+83g==,type:str]
# Mount the ldap certificate to /certs
volumeMounts:
- name: ldap-cert
@@ -77,7 +77,7 @@ spec:
volumes:
- name: ldap-cert
secret:
- secretName: ENC[AES256_GCM,data:Ek4HeexOPShRro49vSM=,iv:EX77mKfLsiPd/j+gBWI0fm3nUemMQRgOOwXeB1Lt3nU=,tag:goEbTSoqtU0hC313HbDcyA==,type:str]
+ secretName: ENC[AES256_GCM,data:UU2WJB3n7WzQRX5OEIk=,iv:YjPGIgu7UWhMEdAH/LJSHdDkin4tMMY2ZzBOguT9VQU=,tag:ryzrMsKoaViRmpx7URHhVw==,type:str]
# Mount the ldap certificate to /certs
volumeMounts:
- name: ldap-cert
@@ -100,7 +100,7 @@ spec:
annotations:
cert-manager.io/cluster-issuer: letsencrypt-dns
external-dns.alpha.kubernetes.io/hostname: auth.midnightthoughts.space
- enabled: true
+ enabled: false
hosts:
- auth.midnightthoughts.space
- ldap.midnightthoughts.space
@@ -125,14 +125,54 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrRXA3VEdvYytyWjNxcURl
- SklXNGNhYkJHU1BuT1AxNWJ4RmRQNkVmSENzCk5aMlhUWG5MazBLVWQ5TlpBQXNI
- Z0ZYbXlOQXQwSHVUZ0RCZWgramxFR2cKLS0tIE9OR2xqeHk1aC82T0V0WVpOMGp1
- ZmVhU2VlRkM0bFhEaDEvQ1dDOXU2Z1EKG1SxgOEoxMyMrb7y42Hay2/HwZmtY97N
- a43EwpiTAHgWn9hPo74gWOGipMZTdWOI0Zxd0Lp9z4plHoQ057mF4A==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2aEZVdzVpbWFYYkxlR1lJ
+ TElyM0tSeDMrQjNXbWIyV0dYcDNJUjFydjF3CmNPb2IzSnRSeFVIaFUzS2dtaktk
+ VXpvV0pGZ2tOdHhBM0hJQjRhWjJaVEUKLS0tIFFNdG5sazIxSkNZUUthT2Mxelo2
+ L2xFMnFYVWpPOFJqbXg1Um56dXZaVlUKlBPL7s2wl2+dJoGiC9b1oXBRvewd9LAe
+ LpuQF38AscU+pkNoi2WBFw2MsvEYF+EtPJczESIwiMetehRj2n4KxQ==
+ -----END AGE ENCRYPTED FILE-----
+ lastmodified: "2025-02-19T14:22:13Z"
+ mac: ENC[AES256_GCM,data:cVtB9Yn3DtLT7DHh6r4y+Kooap4o3Vllx/nnNc8Zd2S2nQ5gmVSG/RBv88pNwCnybsUyK/Yd+1I1jwTzxIz9ZI1gosL23fLhJ9LK/Yzk3d56Z7krqXGp5IIw7I/lZyzyGlSp8R50KpGhZ8BObUU2C7mU7D+/W7ctnMj1mJLP+xg=,iv:4bdFaUt6lBYog6kpsZiixm6kYkzKRj8hwA335th9GVo=,tag:HorsmiQJ9ttuYC5rkzevCA==,type:str]
+ pgp: []
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ version: 3.9.1
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+ name: authentik
+ namespace: authentik
+spec:
+ parentRefs:
+ - name: envoy-gateway
+ namespace: envoy-gateway
+ hostnames:
+ - auth.midnightthoughts.space
+ - ldap.midnightthoughts.space
+ rules:
+ - backendRefs:
+ - name: authentik-server
+ port: 80
+ timeouts:
+ request: 240s
+ backendRequest: 0s
+sops:
+ kms: []
+ gcp_kms: []
+ azure_kv: []
+ hc_vault: []
+ age:
+ - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+ enc: |
+ -----BEGIN AGE ENCRYPTED FILE-----
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2aEZVdzVpbWFYYkxlR1lJ
+ TElyM0tSeDMrQjNXbWIyV0dYcDNJUjFydjF3CmNPb2IzSnRSeFVIaFUzS2dtaktk
+ VXpvV0pGZ2tOdHhBM0hJQjRhWjJaVEUKLS0tIFFNdG5sazIxSkNZUUthT2Mxelo2
+ L2xFMnFYVWpPOFJqbXg1Um56dXZaVlUKlBPL7s2wl2+dJoGiC9b1oXBRvewd9LAe
+ LpuQF38AscU+pkNoi2WBFw2MsvEYF+EtPJczESIwiMetehRj2n4KxQ==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2024-12-27T23:01:27Z"
- mac: ENC[AES256_GCM,data:3Kfrwuqv7Kb+1NdMhX0GxYO5DAsexcpCtOAZ52BvmU0CVX8i1dn0/0XrU+ypfVVs0z4z3zrgUKDJxg80AqNApfSzdT+YN7m+vjlpOQYszVk/7BygRCqv3CqE1AMKbdXLkhFMbBfVwA8Z/2mV/s3zsA+Rxna4SeOOX6pe+fAj/0A=,iv:i1B7LsQ9MeZrhwK3Q+1GsF1T3y9L9GG0aeeKafJI5X8=,tag:mm0ySZCaUNNRRZI8NIQDZA==,type:str]
+ lastmodified: "2025-02-19T14:22:13Z"
+ mac: ENC[AES256_GCM,data:cVtB9Yn3DtLT7DHh6r4y+Kooap4o3Vllx/nnNc8Zd2S2nQ5gmVSG/RBv88pNwCnybsUyK/Yd+1I1jwTzxIz9ZI1gosL23fLhJ9LK/Yzk3d56Z7krqXGp5IIw7I/lZyzyGlSp8R50KpGhZ8BObUU2C7mU7D+/W7ctnMj1mJLP+xg=,iv:4bdFaUt6lBYog6kpsZiixm6kYkzKRj8hwA335th9GVo=,tag:HorsmiQJ9ttuYC5rkzevCA==,type:str]
pgp: []
- encrypted_regex: ^(jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+ encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -227,6 +227,30 @@ spec:
certificateRefs:
- kind: Secret
name: ui.k8s.midnightthoughts.space-tls
+ - name: https-midnightthoughts-auth
+ protocol: HTTPS
+ hostname: "auth.midnightthoughts.space"
+ port: 443
+ allowedRoutes:
+ namespaces:
+ from: "All"
+ tls:
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: auth.midnightthoughts.space-tls
+ - name: https-midnightthoughts-ldap
+ protocol: HTTPS
+ hostname: "ldap.midnightthoughts.space"
+ port: 443
+ allowedRoutes:
+ namespaces:
+ from: "All"
+ tls:
+ mode: Terminate
+ certificateRefs:
+ - kind: Secret
+ name: ldap.midnightthoughts.space-tls
- name: https-midnightthoughts-root
protocol: HTTPS
hostname: "midnightthoughts.space"
diff --git a/infrastructure/controllers/capacitor.yaml b/infrastructure/controllers/capacitor.yaml
@@ -17,14 +17,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUOWp6czNkOW9Lb1BHQXRC
- dGE3Z0NxaFEvQ0RDUTJQR2hPaURobnZzZmdBClNSeFUvZjFoZi9nNklCUzdyamNI
- d0lDaGVIV1Bjbm1TaTc4TWJzazA2TlEKLS0tIEZVY2hBUTh3QzN6V2hVS2MwK1l3
- QWVvRU9vaDhoMlNRUnVSVFljYmx2WnMKwJCuEl0xNuph2YQvz6ArTNzNhMN6kkB7
- IjCKEZfjofEU32WzbaETJ7SapElTEHPar9YqdkNkAtU2qWZfCIqOLQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuVGlqenROUE4rb3NzNjB5
+ K2VYbFFZbVlBTzFkTzROTkgvVjNKbVBzaG1nClNMQTZYV0oxM0VZaGhRU1BTdU8z
+ TzNFUWlzcEs2RUFnejhuZVFzR2gwcDAKLS0tIGNSQmUrNWNWaHByaXpYZmFGZGd6
+ Rk1JMjZFcmpCVlR2OXdvWm5OVmZiTVUK4URsLMr7xgVFTtsJSrEBgt516U6+p4wg
+ AjQMJd3sjQn0g6QLtb6TvaMhy3sTvGm6hBZpRQf63NK89/S+d/fT9Q==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-02-19T13:01:14Z"
- mac: ENC[AES256_GCM,data:LS8XNPWRNUFqN/Ky4dyGJ6PS3pwRZ1EtyiekO418aT/IeBDkUA704TtAqPfKj8YpFzHdycX/WC6vx2mCcpogddmbc8lNIbQOmJaG1fhK9fPypIPK2NKDmWmd5OMiVjvwW6y+Uqlzb8fUf9xY1TmQp8rvN+D09SM5gNDugn08E5s=,iv:o3J52UIRA0GikGxK9CLMXSCavr2irOA/lZbB+OcGvVI=,tag:8nYgLjxkTVa0VYio3FtM9w==,type:str]
+ lastmodified: "2025-02-19T14:22:33Z"
+ mac: ENC[AES256_GCM,data:bvG4vJweYlm8B6lZZz8HmsFF6XMApBMcDk58NrAzAFc/dCm+Q4jeM8STRnG2yGk0swbeGO+lRg3/1emZ+idrGbIQdHcxRI8hODIEvn+D9utiT62w8bpW0N205szsrf3dtUE2tzYqBjBLXJA6TNiRkBbwnRq46yYI/qn+1Drc6jg=,iv:dr1KrmEhN+gpAOat9ObVKvgYOrGjgaWMNLPbgUmOQbc=,tag:3R4wuYeLuFRQ1NETB0bwjg==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -54,14 +54,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUOWp6czNkOW9Lb1BHQXRC
- dGE3Z0NxaFEvQ0RDUTJQR2hPaURobnZzZmdBClNSeFUvZjFoZi9nNklCUzdyamNI
- d0lDaGVIV1Bjbm1TaTc4TWJzazA2TlEKLS0tIEZVY2hBUTh3QzN6V2hVS2MwK1l3
- QWVvRU9vaDhoMlNRUnVSVFljYmx2WnMKwJCuEl0xNuph2YQvz6ArTNzNhMN6kkB7
- IjCKEZfjofEU32WzbaETJ7SapElTEHPar9YqdkNkAtU2qWZfCIqOLQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuVGlqenROUE4rb3NzNjB5
+ K2VYbFFZbVlBTzFkTzROTkgvVjNKbVBzaG1nClNMQTZYV0oxM0VZaGhRU1BTdU8z
+ TzNFUWlzcEs2RUFnejhuZVFzR2gwcDAKLS0tIGNSQmUrNWNWaHByaXpYZmFGZGd6
+ Rk1JMjZFcmpCVlR2OXdvWm5OVmZiTVUK4URsLMr7xgVFTtsJSrEBgt516U6+p4wg
+ AjQMJd3sjQn0g6QLtb6TvaMhy3sTvGm6hBZpRQf63NK89/S+d/fT9Q==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-02-19T13:01:14Z"
- mac: ENC[AES256_GCM,data:LS8XNPWRNUFqN/Ky4dyGJ6PS3pwRZ1EtyiekO418aT/IeBDkUA704TtAqPfKj8YpFzHdycX/WC6vx2mCcpogddmbc8lNIbQOmJaG1fhK9fPypIPK2NKDmWmd5OMiVjvwW6y+Uqlzb8fUf9xY1TmQp8rvN+D09SM5gNDugn08E5s=,iv:o3J52UIRA0GikGxK9CLMXSCavr2irOA/lZbB+OcGvVI=,tag:8nYgLjxkTVa0VYio3FtM9w==,type:str]
+ lastmodified: "2025-02-19T14:22:33Z"
+ mac: ENC[AES256_GCM,data:bvG4vJweYlm8B6lZZz8HmsFF6XMApBMcDk58NrAzAFc/dCm+Q4jeM8STRnG2yGk0swbeGO+lRg3/1emZ+idrGbIQdHcxRI8hODIEvn+D9utiT62w8bpW0N205szsrf3dtUE2tzYqBjBLXJA6TNiRkBbwnRq46yYI/qn+1Drc6jg=,iv:dr1KrmEhN+gpAOat9ObVKvgYOrGjgaWMNLPbgUmOQbc=,tag:3R4wuYeLuFRQ1NETB0bwjg==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -73,7 +73,7 @@ metadata:
namespace: flux-system
type: Opaque
stringData:
- client-secret: ENC[AES256_GCM,data:gKqoO7C5U+e0wRwqeE3iHRfq1coqoxRi/M+iIkBpis3N5CPZddL/Sq9J/XvVuOhZgU2AuHhfCGJ2zyqIJLntHoYSNnLsRPxRzq8Zy0H6noEO9bmuWAdt0aa12JWz2tW8UMvDJ/IDvzUZlq/U4PsIg3e7rx81eB4vUMILHXqnEaw=,iv:1O9RKfRcpsd0s21EA8SOQoQa7O35xZo/Rp10/NcqG1Y=,tag:qNyCgKxlEli2Q8xLC60/DQ==,type:str]
+ client-secret: ENC[AES256_GCM,data:CGHKtEkGnsYZmmXXIYCzCgaNUxr/TvmFOgF+mvb5iP6SmPQLGYcec2UfnGbXrxJneeNe+boYC10rbWQg8pgMyH3EpPlY4ynn1DcM6ZlWJ2lD9gwBYG3+Q+pezagtZJtZ1aJfOdX5Kqdj3eP2/csEuXXhyD1SDPQVTJ5nUYkgIm0=,iv:AW5+Lag2pvDzxorO/COIsxeHt/1suovcgDdSajidCnE=,tag:MTKPaKJNnyLBvhRR4PaW8A==,type:str]
sops:
kms: []
gcp_kms: []
@@ -83,14 +83,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUOWp6czNkOW9Lb1BHQXRC
- dGE3Z0NxaFEvQ0RDUTJQR2hPaURobnZzZmdBClNSeFUvZjFoZi9nNklCUzdyamNI
- d0lDaGVIV1Bjbm1TaTc4TWJzazA2TlEKLS0tIEZVY2hBUTh3QzN6V2hVS2MwK1l3
- QWVvRU9vaDhoMlNRUnVSVFljYmx2WnMKwJCuEl0xNuph2YQvz6ArTNzNhMN6kkB7
- IjCKEZfjofEU32WzbaETJ7SapElTEHPar9YqdkNkAtU2qWZfCIqOLQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuVGlqenROUE4rb3NzNjB5
+ K2VYbFFZbVlBTzFkTzROTkgvVjNKbVBzaG1nClNMQTZYV0oxM0VZaGhRU1BTdU8z
+ TzNFUWlzcEs2RUFnejhuZVFzR2gwcDAKLS0tIGNSQmUrNWNWaHByaXpYZmFGZGd6
+ Rk1JMjZFcmpCVlR2OXdvWm5OVmZiTVUK4URsLMr7xgVFTtsJSrEBgt516U6+p4wg
+ AjQMJd3sjQn0g6QLtb6TvaMhy3sTvGm6hBZpRQf63NK89/S+d/fT9Q==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-02-19T13:01:14Z"
- mac: ENC[AES256_GCM,data:LS8XNPWRNUFqN/Ky4dyGJ6PS3pwRZ1EtyiekO418aT/IeBDkUA704TtAqPfKj8YpFzHdycX/WC6vx2mCcpogddmbc8lNIbQOmJaG1fhK9fPypIPK2NKDmWmd5OMiVjvwW6y+Uqlzb8fUf9xY1TmQp8rvN+D09SM5gNDugn08E5s=,iv:o3J52UIRA0GikGxK9CLMXSCavr2irOA/lZbB+OcGvVI=,tag:8nYgLjxkTVa0VYio3FtM9w==,type:str]
+ lastmodified: "2025-02-19T14:22:33Z"
+ mac: ENC[AES256_GCM,data:bvG4vJweYlm8B6lZZz8HmsFF6XMApBMcDk58NrAzAFc/dCm+Q4jeM8STRnG2yGk0swbeGO+lRg3/1emZ+idrGbIQdHcxRI8hODIEvn+D9utiT62w8bpW0N205szsrf3dtUE2tzYqBjBLXJA6TNiRkBbwnRq46yYI/qn+1Drc6jg=,iv:dr1KrmEhN+gpAOat9ObVKvgYOrGjgaWMNLPbgUmOQbc=,tag:3R4wuYeLuFRQ1NETB0bwjg==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -122,14 +122,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUOWp6czNkOW9Lb1BHQXRC
- dGE3Z0NxaFEvQ0RDUTJQR2hPaURobnZzZmdBClNSeFUvZjFoZi9nNklCUzdyamNI
- d0lDaGVIV1Bjbm1TaTc4TWJzazA2TlEKLS0tIEZVY2hBUTh3QzN6V2hVS2MwK1l3
- QWVvRU9vaDhoMlNRUnVSVFljYmx2WnMKwJCuEl0xNuph2YQvz6ArTNzNhMN6kkB7
- IjCKEZfjofEU32WzbaETJ7SapElTEHPar9YqdkNkAtU2qWZfCIqOLQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuVGlqenROUE4rb3NzNjB5
+ K2VYbFFZbVlBTzFkTzROTkgvVjNKbVBzaG1nClNMQTZYV0oxM0VZaGhRU1BTdU8z
+ TzNFUWlzcEs2RUFnejhuZVFzR2gwcDAKLS0tIGNSQmUrNWNWaHByaXpYZmFGZGd6
+ Rk1JMjZFcmpCVlR2OXdvWm5OVmZiTVUK4URsLMr7xgVFTtsJSrEBgt516U6+p4wg
+ AjQMJd3sjQn0g6QLtb6TvaMhy3sTvGm6hBZpRQf63NK89/S+d/fT9Q==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-02-19T13:01:14Z"
- mac: ENC[AES256_GCM,data:LS8XNPWRNUFqN/Ky4dyGJ6PS3pwRZ1EtyiekO418aT/IeBDkUA704TtAqPfKj8YpFzHdycX/WC6vx2mCcpogddmbc8lNIbQOmJaG1fhK9fPypIPK2NKDmWmd5OMiVjvwW6y+Uqlzb8fUf9xY1TmQp8rvN+D09SM5gNDugn08E5s=,iv:o3J52UIRA0GikGxK9CLMXSCavr2irOA/lZbB+OcGvVI=,tag:8nYgLjxkTVa0VYio3FtM9w==,type:str]
+ lastmodified: "2025-02-19T14:22:33Z"
+ mac: ENC[AES256_GCM,data:bvG4vJweYlm8B6lZZz8HmsFF6XMApBMcDk58NrAzAFc/dCm+Q4jeM8STRnG2yGk0swbeGO+lRg3/1emZ+idrGbIQdHcxRI8hODIEvn+D9utiT62w8bpW0N205szsrf3dtUE2tzYqBjBLXJA6TNiRkBbwnRq46yYI/qn+1Drc6jg=,iv:dr1KrmEhN+gpAOat9ObVKvgYOrGjgaWMNLPbgUmOQbc=,tag:3R4wuYeLuFRQ1NETB0bwjg==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -166,14 +166,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUOWp6czNkOW9Lb1BHQXRC
- dGE3Z0NxaFEvQ0RDUTJQR2hPaURobnZzZmdBClNSeFUvZjFoZi9nNklCUzdyamNI
- d0lDaGVIV1Bjbm1TaTc4TWJzazA2TlEKLS0tIEZVY2hBUTh3QzN6V2hVS2MwK1l3
- QWVvRU9vaDhoMlNRUnVSVFljYmx2WnMKwJCuEl0xNuph2YQvz6ArTNzNhMN6kkB7
- IjCKEZfjofEU32WzbaETJ7SapElTEHPar9YqdkNkAtU2qWZfCIqOLQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuVGlqenROUE4rb3NzNjB5
+ K2VYbFFZbVlBTzFkTzROTkgvVjNKbVBzaG1nClNMQTZYV0oxM0VZaGhRU1BTdU8z
+ TzNFUWlzcEs2RUFnejhuZVFzR2gwcDAKLS0tIGNSQmUrNWNWaHByaXpYZmFGZGd6
+ Rk1JMjZFcmpCVlR2OXdvWm5OVmZiTVUK4URsLMr7xgVFTtsJSrEBgt516U6+p4wg
+ AjQMJd3sjQn0g6QLtb6TvaMhy3sTvGm6hBZpRQf63NK89/S+d/fT9Q==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-02-19T13:01:14Z"
- mac: ENC[AES256_GCM,data:LS8XNPWRNUFqN/Ky4dyGJ6PS3pwRZ1EtyiekO418aT/IeBDkUA704TtAqPfKj8YpFzHdycX/WC6vx2mCcpogddmbc8lNIbQOmJaG1fhK9fPypIPK2NKDmWmd5OMiVjvwW6y+Uqlzb8fUf9xY1TmQp8rvN+D09SM5gNDugn08E5s=,iv:o3J52UIRA0GikGxK9CLMXSCavr2irOA/lZbB+OcGvVI=,tag:8nYgLjxkTVa0VYio3FtM9w==,type:str]
+ lastmodified: "2025-02-19T14:22:33Z"
+ mac: ENC[AES256_GCM,data:bvG4vJweYlm8B6lZZz8HmsFF6XMApBMcDk58NrAzAFc/dCm+Q4jeM8STRnG2yGk0swbeGO+lRg3/1emZ+idrGbIQdHcxRI8hODIEvn+D9utiT62w8bpW0N205szsrf3dtUE2tzYqBjBLXJA6TNiRkBbwnRq46yYI/qn+1Drc6jg=,iv:dr1KrmEhN+gpAOat9ObVKvgYOrGjgaWMNLPbgUmOQbc=,tag:3R4wuYeLuFRQ1NETB0bwjg==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
@@ -202,14 +202,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUOWp6czNkOW9Lb1BHQXRC
- dGE3Z0NxaFEvQ0RDUTJQR2hPaURobnZzZmdBClNSeFUvZjFoZi9nNklCUzdyamNI
- d0lDaGVIV1Bjbm1TaTc4TWJzazA2TlEKLS0tIEZVY2hBUTh3QzN6V2hVS2MwK1l3
- QWVvRU9vaDhoMlNRUnVSVFljYmx2WnMKwJCuEl0xNuph2YQvz6ArTNzNhMN6kkB7
- IjCKEZfjofEU32WzbaETJ7SapElTEHPar9YqdkNkAtU2qWZfCIqOLQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuVGlqenROUE4rb3NzNjB5
+ K2VYbFFZbVlBTzFkTzROTkgvVjNKbVBzaG1nClNMQTZYV0oxM0VZaGhRU1BTdU8z
+ TzNFUWlzcEs2RUFnejhuZVFzR2gwcDAKLS0tIGNSQmUrNWNWaHByaXpYZmFGZGd6
+ Rk1JMjZFcmpCVlR2OXdvWm5OVmZiTVUK4URsLMr7xgVFTtsJSrEBgt516U6+p4wg
+ AjQMJd3sjQn0g6QLtb6TvaMhy3sTvGm6hBZpRQf63NK89/S+d/fT9Q==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2025-02-19T13:01:14Z"
- mac: ENC[AES256_GCM,data:LS8XNPWRNUFqN/Ky4dyGJ6PS3pwRZ1EtyiekO418aT/IeBDkUA704TtAqPfKj8YpFzHdycX/WC6vx2mCcpogddmbc8lNIbQOmJaG1fhK9fPypIPK2NKDmWmd5OMiVjvwW6y+Uqlzb8fUf9xY1TmQp8rvN+D09SM5gNDugn08E5s=,iv:o3J52UIRA0GikGxK9CLMXSCavr2irOA/lZbB+OcGvVI=,tag:8nYgLjxkTVa0VYio3FtM9w==,type:str]
+ lastmodified: "2025-02-19T14:22:33Z"
+ mac: ENC[AES256_GCM,data:bvG4vJweYlm8B6lZZz8HmsFF6XMApBMcDk58NrAzAFc/dCm+Q4jeM8STRnG2yGk0swbeGO+lRg3/1emZ+idrGbIQdHcxRI8hODIEvn+D9utiT62w8bpW0N205szsrf3dtUE2tzYqBjBLXJA6TNiRkBbwnRq46yYI/qn+1Drc6jg=,iv:dr1KrmEhN+gpAOat9ObVKvgYOrGjgaWMNLPbgUmOQbc=,tag:3R4wuYeLuFRQ1NETB0bwjg==,type:str]
pgp: []
encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
version: 3.9.1
