cluster

Infrastructure files for Nordgedanken and Midnightthoughts.
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
Log | Files | Refs | README

registry-secret.yaml (3099B)

      1 # IMPORTANT: This file must be SOPS-encrypted before committing.
      2 # Fill in the placeholder values, then run:
      3 #   ./encrypt.sh apps/talos_cluster/image-builder/registry-secret.yaml
      4 #
      5 # Generate the auth value with:
      6 #   echo -n "USERNAME:PASSWORD" | base64
      7 apiVersion: v1
      8 kind: Secret
      9 metadata:
     10     name: image-builder-registry-secret
     11     namespace: image-builder
     12 stringData:
     13     dockerconfig.json: ENC[AES256_GCM,data:npOvF06b+ByAIYCbw8h7GXAIeerlzd+RvsoCwQHnEs4BZE81O089yZqETJ9SWnoVx6/IBUqlbo2FNGki6VYFOB4mjA9fqqrP0R/WEQ7eXa+VHlwgM8Z/lNT0IKf3SCyz9Inpd4WougbgNIag4Oa+8kk+Kss4ouNcSqJiUqkcS37SEksu48xxLrcu4wzWPF0xI1t09x8JH/pnL4MRVZ+ey1IKj9gEknl0DRNxJJgjiEnD,iv:IcwMs2Jis/SmHyLcYJLe5g1MW33nLBLJGEsHQu4chZU=,tag:D4EvKMcPmu8oNbI4nCjBwQ==,type:str]
     14 sops:
     15     kms: []
     16     gcp_kms: []
     17     azure_kv: []
     18     hc_vault: []
     19     age:
     20         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
     21           enc: |
     22             -----BEGIN AGE ENCRYPTED FILE-----
     23             YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLQzdQK21LdVZUei9rRzEx
     24             RjUxcERVSXRPMDhBdFNHcHkxUyt1Yno5ZHc0ClVCOUxZWkwrbmdPS0VVNWJuV3M2
     25             ZGpjaTdZZ0xnNHN6OStlSlBSV3hYTTQKLS0tICtOZlFua2JMQ0ladXBiUXE0eWs3
     26             NEFBTFNaQmRwQUhOT2NXb0dpUlphdlUKCh4AjN7+pkhnPehzc8FhNCIcLurRidSO
     27             h7nLeIgVg7391aIqSAGRDBIUmT/sNnZVMzjvSkRDCFnhoTEGrp/4PQ==
     28             -----END AGE ENCRYPTED FILE-----
     29     lastmodified: "2026-03-29T11:16:38Z"
     30     mac: ENC[AES256_GCM,data:MIQJG6H6cZKKPx6r/vqEfjATr9rcZC0NGSI68ZLCfJ0E1xrrbscR9ka5WLMR6stSFSdJcvD5vXbWdsfXnL7lg7scg26f0ZwnoYr3sQEifNnLHjvh+K+2np6kmTg1m+SqbEWherVd6x818tKItVNPySY1XRO+G3uEFYoO7QMNDjM=,iv:yh8mKWpHYjZ/pmiUvm6m7j+YgdgTG/FzRd42VMTxTp8=,tag:hUXS4+FVd0uoUjXoWAoHyQ==,type:str]
     31     pgp: []
     32     encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|smtp_auth_password|addresses|smtp_auth_username|authorization_credentials|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$
     33     version: 3.9.1