cosign-secret.yaml (3872B)
1 # IMPORTANT: This file must be SOPS-encrypted before committing. 2 # Fill in the values from the COSIGN_PRIVATE_KEY and COSIGN_PASSWORD GitHub secrets, 3 # then run: 4 # ./encrypt.sh apps/talos_cluster/image-builder/cosign-secret.yaml 5 apiVersion: v1 6 kind: Secret 7 metadata: 8 name: cosign-signing-key 9 namespace: jenkins 10 stringData: 11 cosign.key: ENC[AES256_GCM,data:tk4jgp+50k5Z7UwjENjjYf+su8MY7bvrYGxA6fd06CDlFWlCtXBjMujElUfxjoXQzVW2POn/JCvmLy86VuRu84pALO5fMWI0VYhVzlGOf/La7X71YngzCaQnrEVp6bO5HaCUPDPnugF9DzOQBGL/o8/SwrL8VFhilam+IUfPVK0Smm6A8PJtDFau+Wtpu6CP0keaHPwzX9cY1MPI0cyV+AOptcASsJHE8WCDB5zMGoXjz3gVxqi+eyo8dASrIB9YAEH0lyjItOCFwiMbYfhC3rLtFc44Q8mgRTUsMXdonA5gUi0N77W2xaewUuWdoYJY/mAcX+xKe/KtoIsNYvkWi93Y5OGv8ZBvFSvL7xz4lAL3AZGvs5JMG8mpV/inrVINC1J94CLHk2Ourymd4u2XuDkuzjJnmE2VnjfrXXo4kXBIyC55RhnvdCOjUc0GhMPk88o6HN8olV52rx9OYDumsIYyIFPH9GzsrI7tcVBzg8AWX/xL6SopMb59ngc4qAzf2r7GIlACzz5GZhfZtjGXClk1DVecLSEywEftkjAZ4t9YGl6MJPwfnjRxXHNS5t4WgJ0nodqK3w5qOJqnaiYnKDY24ok1Yuv4Y6mA/FfMvjy+hu7nj/IoJZ+QlULVDtcx2RK/hIbRzyGSYT/jj4GIlUyKpRPwm7ki1OouNNnNuDVvCp6F67M7olFxWjkxS+iT3lm0g2nSiJe4ngm0EwKQG2RBDe7SVJTcasm0R40QvbFqPBVLVhdLDTKW980t/TVqUMTgbb3WjlPV1Sju21sgrbYTXQlc5mki+118V1u62uq8JLfio5Lv6h3V/sws6o5UPf3+Y7hu+MtNE8Bhw9+aT21hLFA+8RK8RvjSZIo=,iv:qpsioAEH7IGBMoWWtMFh/Wneaw0GUEF3TLM8oXThDQc=,tag:r9fx8qzSfomQhyV86CV4IA==,type:str] 12 cosign.password: ENC[AES256_GCM,data:dgTshbPNKflUT02XXhIwzUF38mUCbTcvObqu4PBwA9Wc+wja/jeXCzun,iv:5jH3fTYhoFYQU9V8F044T04vsuTDX6F6WNR5xkcPYWo=,tag:YCmzB4NKeUJF+54VLCt3rg==,type:str] 13 sops: 14 kms: [] 15 gcp_kms: [] 16 azure_kv: [] 17 hc_vault: [] 18 age: 19 - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh 20 enc: | 21 -----BEGIN AGE ENCRYPTED FILE----- 22 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBValVFOUtWMGc4c3RuV1Y0 23 cFhpRUY3MlhlM2wvb1p0SHlXc1YxVnlNRTFzCjhzSEtCRXJ6aEdvM3ZsVVEvWFlR 24 cGxDaWE4RG9IOVFxU1pEREowMk1OeG8KLS0tIEZNcWhJYU5JMFlhc1k0a3c1Q3FV 25 SS9XTnRobGwwS0JaTkIvTUZ1ZnEyQXMKXmF+q+AC4hO+2LDZn9u6PBkAeGPK67uI 26 3vDmtzjJQpcpwqTEJF6wWuWJ1L1IwXyCUDJe37yH7StHiQDkM7U3Lg== 27 -----END AGE ENCRYPTED FILE----- 28 lastmodified: "2026-04-03T14:30:19Z" 29 mac: ENC[AES256_GCM,data:nXHEKbokj5TZ8X4RIEAlZ+bP7EB8ky5tugQOwlm78zFOUUbwwyJWmkn5/ZuHqqletWW7qFO2oadfAPfhiKFtQEFFrn7r5TNY0sdhSPJ06BUY7n/vfb8Wc/iZJdVjS1vsLdlDzMxIga8SyDMyGUxDgc1ao2cOMKzh3j3MwwSfTSw=,iv:yGFxliqf0vLWT4X9L8GxmCE/+1eL/ywmtfBH7UMSAD0=,tag:wZvJNZXDq4hbJ7Td4kvOfQ==,type:str] 30 pgp: [] 31 encrypted_regex: ^(apiKey|appUserPassword|otelUserPassword|harborAdminPassword|totpVaultKey|kimaiAppSecret|kimaiAdminPassword|GITHUB_CLIENT_ID|GITHUB_CLIENT_SECRET|GITHUB_PRIVATE_KEY|woosh|root_password|rspamd_password|pgdb_password|matrix_access_token|pgdb_remote_url|hmac_secret_key|adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|smtp_auth_password|addresses|smtp_auth_username|authorization_credentials|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|integration_key|rootPassword|adminPassword|adminUser|adminEmail|emailPassword|secretKey|appId|clientSecret|webhookSecret)$ 32 version: 3.9.1