k8s/argocd/secrets/paperless-oidc.enc.yaml

apiVersion: v1
kind: Secret
metadata:
    name: paperless-oidc
    namespace: paperless
    labels:
        app.kubernetes.io/managed-by: argocd
        app.kubernetes.io/part-of: iam
type: Opaque
stringData:
    SOCIALACCOUNT_PROVIDERS_JSON: ENC[AES256_GCM,data:/muYqHv+LRPhAl3u7uHv1a0O9vG9nZ0zJawcAmUTHA1x3VKnoaiqQCQrYL8Mg4TtOkXHn/ESwuq5Nbyr/P3E6n9C6BG7Dg7/7vtj/OiL6URN8apjsKQvQAswfycmhWJZV8kMRJNT9IBWjQ9D02MhLan+WwVBWOlT2bWBa+mMogBRgNSorbTRYXao24Qh2KRS9NRDCyOQ0Mp386tyjC9JQzXJ4R82RNh9VuipfPFgo4Mk/wXUihft/lMe1xcVrgl8uxecspbOFlgUMjtuhfEHc+tIVxD5P3I8RwXKFNtO1Yol8tnRAl2liOPaYWCRMQkOqFj5FUrJ0n1Q+vFmf8kjUmPASD1k22LDbywdOQKHeg9YYtbdg/barXrBSeshw69XqlfDlrjf3Zjjd+FSfUzQCLKS9b3xh4d8t8M+9U8DvcuOynwiL5CoinpgYamfNZkKrsSYyDVyNMh2feCSb1q/9B+lNMoJBQyT6E+S,iv:ab2EzS3CKYDaLtkLUq2O2OKz/bGFeGd39/NUWHeJxPw=,tag:ToRTsuNQIlE3CwTwoyhlaA==,type:str]
    client-secret: ENC[AES256_GCM,data:aN5d4DLlEtKj1rjhisMuHKoT7+6UMsRjXtc22UIa8sEOvSrEWOiDraA1lziFXv9crl9q8k0SMbKdSYNtXDiIrQ==,iv:ZXHezTA/8oi+8FdKsc2UKAKCLGqh4u4o68IeIeAskMQ=,tag:4U1d99cAq5EEhNh3ftvQzw==,type:str]
sops:
    age:
        - enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3M1dsQ1pqU3VLN2RGK3Rj
            dlkzYWF3VThuQVhOVmg2QXFBUlFIcW1BYjFnCkgxQVQ0MmJwY0NmNjRocHdtNXR1
            LytjZUU1WkEwOXRYVGhab0xMQ2xKaGcKLS0tIGZ5UjNHRjRLSVJlNWQrM2srSktY
            S0tGYWhJdTdpU3VidGNBeVI4MHVUYWMKOTEqu+u5fWhG/Gwc+GMCY6WBOvNLMwPN
            bwghAsCteT3k8SuEWql/hLNlfVzFLuPMYFBtUywk2QGhi59ziz+BiQ==
            -----END AGE ENCRYPTED FILE-----
          recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
    encrypted_regex: ^(data|stringData)$
    lastmodified: "2026-10-31T20:59:50Z"
    mac: ENC[AES256_GCM,data:KU760wyocphtQfBrVc2qlZffj4f+jOOcJowwO4TOiaAd5PqPU/PL+y6gPuT6LpK8Vt9pUhncZDjn/T/9K995oQoNzYgpm5ihyDhQbzHjszzlsA8Kbg1c/PAxy1r1kU8HahvuO9qlYa2k68NO8g0qnFByvR6oIF/lSFavXIaINOw=,iv:u+9OuFSgyx7L9WHBi0vv6GnOm5W5zk5y1N1HEKwS0Fs=,tag:9+H9NsFEKer4hQMs8yql3w==,type:str]
    version: 3.13.2
fix(iam): make ZITADEL OIDC secrets and identity links IaC-owned (#85 ) 2026-10-31 20:53:53 +00:00			`apiVersion: v1`
			`kind: Secret`
			`metadata:`
			`name: paperless-oidc`
			`namespace: paperless`
			`labels:`
			`app.kubernetes.io/managed-by: argocd`
			`app.kubernetes.io/part-of: iam`
			`type: Opaque`
			`stringData:`
fix(paperless): align stale client-secret with the live OIDC secret (#86 ) 2026-10-31 21:10:26 +00:00			SOCIALACCOUNT_PROVIDERS_JSON: ENC[AES256_GCM,data:/muYqHv+LRPhAl3u7uHv1a0O9vG9nZ0zJawcAmUTHA1x3VKnoaiqQCQrYL8Mg4TtOkXHn/ESwuq5Nbyr/P3E6n9C6BG7Dg7/7vtj/OiL6URN8apjsKQvQAswfycmhWJZV8kMRJNT9IBWjQ9D02MhLan+WwVBWOlT2bWBa+mMogBRgNSorbTRYXao24Qh2KRS9NRDCyOQ0Mp386tyjC9JQzXJ4R82RNh9VuipfPFgo4Mk/wXUihft/lMe1xcVrgl8uxecspbOFlgUMjtuhfEHc+tIVxD5P3I8RwXKFNtO1Yol8tnRAl2liOPaYWCRMQkOqFj5FUrJ0n1Q+vFmf8kjUmPASD1k22LDbywdOQKHeg9YYtbdg/barXrBSeshw69XqlfDlrjf3Zjjd+FSfUzQCLKS9b3xh4d8t8M+9U8DvcuOynwiL5CoinpgYamfNZkKrsSYyDVyNMh2feCSb1q/9B+lNMoJBQyT6E+S,iv:ab2EzS3CKYDaLtkLUq2O2OKz/bGFeGd39/NUWHeJxPw=,tag:ToRTsuNQIlE3CwTwoyhlaA==,type:str]
			`client-secret: ENC[AES256_GCM,data:aN5d4DLlEtKj1rjhisMuHKoT7+6UMsRjXtc22UIa8sEOvSrEWOiDraA1lziFXv9crl9q8k0SMbKdSYNtXDiIrQ==,iv:ZXHezTA/8oi+8FdKsc2UKAKCLGqh4u4o68IeIeAskMQ=,tag:4U1d99cAq5EEhNh3ftvQzw==,type:str]`
fix(iam): make ZITADEL OIDC secrets and identity links IaC-owned (#85 ) 2026-10-31 20:53:53 +00:00			`sops:`
			`age:`
			`- enc: \|`
			`-----BEGIN AGE ENCRYPTED FILE-----`
fix(paperless): align stale client-secret with the live OIDC secret (#86 ) 2026-10-31 21:10:26 +00:00			`YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3M1dsQ1pqU3VLN2RGK3Rj`
			`dlkzYWF3VThuQVhOVmg2QXFBUlFIcW1BYjFnCkgxQVQ0MmJwY0NmNjRocHdtNXR1`
			`LytjZUU1WkEwOXRYVGhab0xMQ2xKaGcKLS0tIGZ5UjNHRjRLSVJlNWQrM2srSktY`
			`S0tGYWhJdTdpU3VidGNBeVI4MHVUYWMKOTEqu+u5fWhG/Gwc+GMCY6WBOvNLMwPN`
			`bwghAsCteT3k8SuEWql/hLNlfVzFLuPMYFBtUywk2QGhi59ziz+BiQ==`
fix(iam): make ZITADEL OIDC secrets and identity links IaC-owned (#85 ) 2026-10-31 20:53:53 +00:00			`-----END AGE ENCRYPTED FILE-----`
			`recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla`
			`encrypted_regex: ^(data\|stringData)$`
fix(paperless): align stale client-secret with the live OIDC secret (#86 ) 2026-10-31 21:10:26 +00:00			`lastmodified: "2026-10-31T20:59:50Z"`
			`mac: ENC[AES256_GCM,data:KU760wyocphtQfBrVc2qlZffj4f+jOOcJowwO4TOiaAd5PqPU/PL+y6gPuT6LpK8Vt9pUhncZDjn/T/9K995oQoNzYgpm5ihyDhQbzHjszzlsA8Kbg1c/PAxy1r1kU8HahvuO9qlYa2k68NO8g0qnFByvR6oIF/lSFavXIaINOw=,iv:u+9OuFSgyx7L9WHBi0vv6GnOm5W5zk5y1N1HEKwS0Fs=,tag:9+H9NsFEKer4hQMs8yql3w==,type:str]`
fix(iam): make ZITADEL OIDC secrets and identity links IaC-owned (#85 ) 2026-10-31 20:53:53 +00:00			`version: 3.13.2`