CI / CI (pull_request) Successful in 3m7s
Security improvements: - Fix gateway→authentik port from 80 to 9000 (matches NetworkPolicy) - Encrypt gateway ConfigMap (contains internal cluster DNS names) - Encrypt gateway-config-secret with SOPS using AGE encryption - Add .sops.yaml configuration for future secret management Files encrypted with AGE key: - k8s/configmap.yaml (ConfigMap → encrypted) - k8s/gateway-config-secret.enc.yaml (Secret → encrypted) Internal infrastructure details now protected: ✓ Service DNS names (.svc.cluster.local) ✓ Upstream URLs ✓ Auth endpoints ✓ Port configurations Fixes JWT validation failures and 401 errors on LLM requests. Reduces attack surface by protecting infrastructure topology.
25 lines
6.8 KiB
YAML
25 lines
6.8 KiB
YAML
apiVersion: ENC[AES256_GCM,data:8TQ=,iv:U7JYi6fxipUMyscpSpeJD7muF+hCgylff1dnJkKzywo=,tag:lupDub5YL+J9ckzrKc/4lA==,type:str]
|
|
kind: ENC[AES256_GCM,data:XSYDX0OyRWMU,iv:q85HtZddwP6hfQu+EwwOE+3a+tN04uuKKOOdtaJc2g4=,tag:vRLf021ZCugfduJCc/WTOw==,type:str]
|
|
metadata:
|
|
name: ENC[AES256_GCM,data:D2n/HWMdgS9xsHeD6nDNaDt9,iv:cr9coFTu7uhlo6HYZV9Ux//KUzoDY/ydw+RSKFb2z3E=,tag:QjMi5VRdCXhyO3A44hrL7Q==,type:str]
|
|
namespace: ENC[AES256_GCM,data:sWer,iv:aT7nKAm0KM1hxyAuj1oTeeIHwyfMlmx9yAIv+cW+kio=,tag:XuZJjwnj9eClQ8HUKe1EgA==,type:str]
|
|
labels:
|
|
app: ENC[AES256_GCM,data:6QeLYRWYA5oMSDY=,iv:Jiv8aLjJN6H7l4/NxqaNG5sSgsWosDc5j6eLEayG3IE=,tag:xkU0ti4hikIPi6xbthH0gg==,type:str]
|
|
data:
|
|
config.yaml: ENC[AES256_GCM,data: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,iv:pieacH/aOj4/4KaaydhItbYZihFIO49eEN92vLXZTGg=,tag:FU01xRqqPgA4MzjsTVUS6Q==,type:str]
|
|
sops:
|
|
age:
|
|
- enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGZ2JCYVN3SEZJOElTbVlL
|
|
RE5RR1NpdzA3YXM3YnBBU1ZBZmIwRUlKVmxJCkp6eHFCdlpvZnJrb3pQb1lXZWZw
|
|
cGJrUlpqYldxRGMzWk5jMVh2Z1E5bG8KLS0tIFArUXMvTDA0VkwwZUNWUlVXTmJW
|
|
SWIxcjNNVjJlSG0xYW9qM0IzUGUvdWMKoM1qv53QI3j4v1dh3T8n2lTZMh5b/9+k
|
|
eM752ZDeks5XyV0ufloGdEaRk+qZeyM6gEqbk/wawruhemNEvo6Wfg==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
|
lastmodified: "2026-09-12T23:54:32Z"
|
|
mac: ENC[AES256_GCM,data:6SqzXEZrOMycjKTQlsfKiUv6HSeRGoLs1NW37qqeR0tJFGZU5pXYnIQ/S2SguIFFclfIaXXVzn44aHcceTxFe6OziIGeLlQi9hRUJyk56r73OjybnQHGl7L1sUlcmDG3NGNOAGmbw9rDQ7y45ql+0pLK2UxGeaHUuADtVeLPBzU=,iv:dGeyzAErd0gDyPsFOGUcpTGu/CGmUIriXyTHIVFLDVs=,tag:KG3UnYjNBQXM8SycGMppCQ==,type:str]
|
|
unencrypted_suffix: _unencrypted
|
|
version: 3.13.2
|