refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments
This commit is contained in:
Story Crater Bot
@@ -19,8 +19,10 @@ spec:
|
||||
source:
|
||||
repoURL: [email protected]:Riotpiaole/riotpiao.homelab.com.git
|
||||
targetRevision: main
|
||||
path: .
|
||||
plugin:
|
||||
name: sops-secrets-v1.0
|
||||
# ksops decrypts every *.enc.yaml here at kustomize-build time (repo-server
|
||||
# runs `kustomize build --enable-alpha-plugins --enable-exec`). Replaces the
|
||||
# old sops-secrets-v1.0 CMP whose discover glob silently hijacked kustomize
|
||||
# rendering of any app whose path contained a *.enc.yaml.
|
||||
path: k8s/argocd/secrets
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
|
||||
@@ -0,0 +1,20 @@
|
||||
authentik:
|
||||
secret_key: ENC[AES256_GCM,data:/7NF9khX7mCjwB7WI5BgbPQtLdqqrwkNuH9BoSCY5pAT2HdU5fVFxdsGguEo4UUmSSvrJ32AmaRgG2Xf3sJweKctyGsuNLauOzQXrYdqa2k=,iv:ZkDp4gOHY1eH44cDhGaZILi8dFDTNuYf1CVE+qrapzE=,tag:G2r3uuiixADJ/qQh/mT7Mw==,type:str]
|
||||
bootstrap_password: ENC[AES256_GCM,data:4uNAXv1uuqiYO1j5CKntjHPWAX4+ek8v1zIrAFHJF+U=,iv:ccA703HMomR58cD2/6wK1W0IKJb7U1hNws6fmwG15E8=,tag:eO9zZ0TwUuXZ/vdHkSeO7w==,type:str]
|
||||
bootstrap_token: ENC[AES256_GCM,data:OYRsLR+hzoKof7rZzzTu5eST6ByqRq+U+LWlhEC4qkLKVChhXi+mdIuK6RO5RHmHtgCBTyIikvwbFMLPSXAIEw==,iv:EJCetXnkNe+UuhWk4f3vr3kIEbCuVplVKHPne3aVIQ8=,tag:Rv/oDbf5afG7QHwSm/8SBg==,type:str]
|
||||
postgresql_password: ENC[AES256_GCM,data:FG07lU+lJMm268FmpgZ4XaEk98ANWMiJ0zExLTl4Rkw=,iv:VSJ3d8p4f5SQM2lVdhSLY5dqdQTKwcfzOCATIM5M/cw=,tag:E5917Q6ofdSrrS9Pe8uMIg==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFcStlcXdQb1AvZmxFT2U0
|
||||
N05yYi9WQkc3WWsrMHc3VXBPQllnLzZEd2dFCnhuUENiWTg5OVV4MXBBd29rSVdN
|
||||
MUdyZURiUHFXZlNld2NEOHkwa1RGZEEKLS0tIGRjUkFHL1lNcnErZ21UOE9TUTE4
|
||||
RTNEMW5xbDJHYitTSjQ2cnRtSG9iQXMKXlHsfHV4EOoesW89I4McQdpKLfrcP1Cu
|
||||
B3RhKbwPVVTx4RkSJ/Y02mV4C/MtHH8q1j4DgBvoBxU04efmD7u0VQ==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
||||
lastmodified: "2026-08-12T18:02:01Z"
|
||||
mac: ENC[AES256_GCM,data:w+RVU9gs7BaW8BOHISBhqGI3rj7gHwDgz71cAwpxemhJvM2D7to3ntGrae+W7jIvy/jie2Bnf40XfCOlgbuJGbAOZpyEodO80UhGNAr2XJH8mu1E4yJrq1Il+obTvDQU+cs4c78Ix/Mr+MzLnCLP/N3U0Qw5qJhxAGaDhH0g0AA=,iv:BgjCQM88VTInwvAbtudWkiuureT7wSM7QmCwlSGMycw=,tag:u4Z0lgXMJ9q4UE1hv/yl1A==,type:str]
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.13.2
|
||||
@@ -0,0 +1,17 @@
|
||||
cloudflared:
|
||||
tunnelToken: ENC[AES256_GCM,data:mFqJUuK8bzKnPAk4ZwBSLP7p6IiUCldmFNKSS5P75rKBgrrTrRB24Vqf6W7UwM2w+/CNzkQ0QByNw4/TzjHDgNH1UJAYXlVvm4H8/NPp4WPWlv5YO67l/mAmPVnBEmJzU0KgivCQm3psEYiEfbgiIbujqr0isgtkU856BimYHqtEdBmYRuJ5c73noaV6NWB1aTnEiCOmmNs+NCkN2GswgSi/zJLbd0HJPQT8h8+3rI8L7nC0/HJvYw==,iv:O3i0v+M5L3i9O7SbBtDAJe5IsQDgw+alI0Y9arZNojs=,tag:Tl9f0oVsBi68AyK3QwlHfg==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBWlk3V1d1cjFXV3VrMUVN
|
||||
LzA3NlVKbllHYkdEb2pESEJkQ2RyU3UzOVZnCk1NdGVUSVpHMHNYUGhOdEhoTi81
|
||||
YVlvU2Q2WmRUdC9KTGlBaUVnU01rbzgKLS0tIEhLNzl2UmpwYjQwNTl1YllnQ09X
|
||||
Y0ZwR1N3Y2VNQ3VkbkJvRG56RWE3UWMK5tv5dgjKlbHq1Rh4NC0+3b9n1yTE/7vW
|
||||
TehGG7k18zclBiZD2y5l4/CeDPM/yi5kfbPuxG1kURffw1xUeac+Ig==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
||||
lastmodified: "2026-08-12T18:02:01Z"
|
||||
mac: ENC[AES256_GCM,data:DshqXuhhJo0eLMTJ+HeAEk6JOtzGQ6OyUd7fSIGWHL/rGfDPliDBdTqpWw1899kgF0LRxY87rTTod65KvINp2HHc8KBQKa5MiAoTXQBThlFYIHFDOL2XQve9p6TKzsVDsQrBsl0lGt9V+Ou+YWUGh9kx63me1wAl8aZ9ltwWvZ0=,iv:4exYbWC7f7WGUncT1KcjrTy0r8Ox3YCctShyMiiaw+4=,tag:YMYOvwm2844LC76n3QvEdQ==,type:str]
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.13.2
|
||||
@@ -0,0 +1,24 @@
|
||||
loki:
|
||||
storage:
|
||||
s3:
|
||||
accessKeyId: ENC[AES256_GCM,data:vH6ysm5g9tDxmQ==,iv:a6oz4kQciHc/sqT1lu05CqI8+iJmi82JAQJ9BM5yBjo=,tag:90PuLvoHdm2GUKN931B4CQ==,type:str]
|
||||
secretAccessKey: ENC[AES256_GCM,data:SC8AU4nRAlSeWPumJ+RY6MGQgfXpw0HDILG52urcNISDyB/5ViKZsfHinps=,iv:0rq4mv8cQ1za8ZLlR8voePiwZFdzK8sbRDDqgloO68g=,tag:cljugMlbkwvzVzdNS929mA==,type:str]
|
||||
bucketNames:
|
||||
chunks: ENC[AES256_GCM,data:byLUVs3mp4N/eDs=,iv:Jqt3iHhLaHae6g4CsylytZxg+3fnTdw4PUinhaUaOCI=,tag:uGsocMDRYltQxpPCsDffrA==,type:str]
|
||||
ruler: ENC[AES256_GCM,data:Fqmd8hmoo4V8pw==,iv:K1ddZrCVFAo+CZet+BV7KJh6RVPzGbsnVIkoZpjWCU0=,tag:gTi2VInLznoOKDh5UPDpSQ==,type:str]
|
||||
admin: ENC[AES256_GCM,data:Hn0yFD0ApG9+bw==,iv:DpuT40Jl9H1nH04u+gm7pHFox7QrZ52WqNQuBqGiz8Y=,tag:KI9dlstNNC7ZRj5TqFWpDQ==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBERnBENi81eVpWVDRndkRu
|
||||
a05mM3kvUVFKVWdEVWxKMjFDMVhpUXJGeVUwCmQ0bjQrMUNBbXByNENGNEtSbGdO
|
||||
NVVRNlZFK2FOV3Y3ZTJpRGloV0hCVEkKLS0tIGxoaSsvVTlvdk5SdklqemxWWUs3
|
||||
dE40YVlOTlFray9aNUhpZ2t1VU4xY2MKyKmoJGrsjA3uoglXjfs6s0IXeswbO5K+
|
||||
eayKHEaxky+lngiLBlw7b0S94eGAAHHyNNA2Ii93UuK89RmK8pWRxQ==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
||||
lastmodified: "2026-08-12T18:02:01Z"
|
||||
mac: ENC[AES256_GCM,data:4Bjk5OYL7lnbt1WBcLQvKxJDn6aRaACFSPXpvF1mzb2dNN4sG9di3BErV5tB7BTtRC6Z3C57IrV6u5FUIKNRg46oFGIv5FoQpzvR9OA7G+wN+gCaMg/hv9ruBqOUhjsHLRUWGqI9aou2cQt3V7I/L8a5eEWkoBquA9YJjEkwPEk=,iv:H9PjzPpFKMlDjETU/lutXHOADzWYX1kg42mmea4+3o4=,tag:XCvH+svw/A8dr0FnzGdgeQ==,type:str]
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.13.2
|
||||
@@ -0,0 +1,18 @@
|
||||
temporal:
|
||||
oidc_client_id: ENC[AES256_GCM,data:gyzO+wMlDrg=,iv:4n5fIeiVG2JZOCD4yZ4Asm/gWvRl0QNFiRGTR1bs8ws=,tag:MV1b/F5OOihe+K5qlkZnTA==,type:str]
|
||||
oidc_client_secret: ENC[AES256_GCM,data:ND7XhSln6AVq6Qy465M6x5Hupjp+xZQKnqT+OW1U+bR7CAmsnZNom1wVpm0=,iv:qxa8aqUVoN31PpzAhs6bNMDCM6yPvOT27urIrM1rfo0=,tag:SRoQ7q7Nqn8TZGxmLxKXKg==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1MEVQSkE2WmpOanp2cXY4
|
||||
M3NVNmd0U056bE52dXk5YUNBcE04c0V2SW04Cm1KTDIyc08xRHR4bnU2N1ptbHFM
|
||||
UXRuOVQzaU1vQStZMG9yRzYyd09Idm8KLS0tIERTNjl1Q1ZtTDlGcGFpdlAwVjhQ
|
||||
U0VxMTJBRkc1bGlXZkFxZDQ4OWlwYlEKF35/ZOxDMvxhXV4rIhtNdaE7+vQ9JOs4
|
||||
+ou88d2WnLD9U50fa1RC3+zS/5CwzIAOetfHeVSjPLkO9oVXuGhU3g==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
||||
lastmodified: "2026-08-12T18:02:01Z"
|
||||
mac: ENC[AES256_GCM,data:Gf9u8t515vhogURw7sOb5cAMKeEBEzuX3V6mDP4OtT6bPinyLRwvgp/j5E5lB0ANYggFHXiv4FL8Nb/pAQXxNe0v8rxwuWiTSspJrM2l2JzZ/nLDAfQiyOVUsoYY15HsGzjbmRT5VEQf/9ceSVqS2tAliZj7hH/hDsncc46vWHI=,iv:gOuSf898MMtzW6L2K+Z/yObn+9Bg42JvT0IlhGK+HSs=,tag:2MEPiaSqdedUibMuO/2RSg==,type:str]
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.13.2
|
||||
@@ -0,0 +1,23 @@
|
||||
apiVersion: ENC[AES256_GCM,data:qhU=,iv:/1G8RSCBaiQ6msQEPPOO4LzlbYOzEbNvT9OwnY0E1JQ=,tag:xO1Nw12oNk6wFCmw0YldEA==,type:str]
|
||||
kind: ENC[AES256_GCM,data:U/sQsZyV,iv:KMW7WL9ZjTmUz3NOQRhjsuAH2EZFXGk1P4hhl7cp8c0=,tag:0WiWyaaT1hmmVk837dFQfg==,type:str]
|
||||
metadata:
|
||||
name: ENC[AES256_GCM,data:tQIaIJGaBzzLqa9vjPVlyhEymNupmKl6yyhx,iv:1qXckUq4RTBZ06YNLXsuMW1UWRK9cgymDdVnmwLZles=,tag:J2e9k7fmTYhhUFzRfkNYuA==,type:str]
|
||||
namespace: ENC[AES256_GCM,data:bWQZWAI3UY04rdp2,iv:YCv7jIXpkzTx9iu9ScwHme8Nc8iqJr1xn8yXK/OsHk8=,tag:Xq9mX/EUHIOClV/YUm2suw==,type:str]
|
||||
type: ENC[AES256_GCM,data:lQUZvLVW,iv:iseIGnyGeVE76BORrjX/TnvrfzaRMOFrQ7oWT0jIS9M=,tag:JMGEqkIwlrB25m5E1hBH7g==,type:str]
|
||||
stringData:
|
||||
api-token: ENC[AES256_GCM,data:i2P1Qm062lGubNILbbpzX/AWga7s+RhZ3ODsue4oWKZ7xMHvhYaLUG3/t7YEOmu2qxvvdjQ=,iv:uFvlesWdZUbiuh8WTq1uLBRtuptV2tXxGJ6PVgu7vCI=,tag:PXpdMfGR5Yui/e3PGRUWZQ==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3OE5SY1Q4OFdsSkJ2Q0NK
|
||||
TmJmdk1RUEZHbS9qa2hPQm1hRzg5UTFKMGpNClRNRlZ6a0hjdDU2UkRHaDJKbmdW
|
||||
MlZhTFBubm1HcS9MZTltQnNOLzBmNUEKLS0tIDZaSko0VGZOSm9EcFZ2L3V6cHVU
|
||||
RFJ1bFY4OGJYb3pnMTFTZ1c1NjdoazgKhwqR2KeygYCpTR8u+pmMYzjNj3XyuhKZ
|
||||
EBXYOrD3nR4JSoULAUHnZto1HwVVf6/SaR9rbg5OunOlCkUdopLNig==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
||||
lastmodified: "2026-08-12T18:02:01Z"
|
||||
mac: ENC[AES256_GCM,data:loYaADf5M4WMJCruMwcBHuF+MtQGYXrYv+MTNjtYRuk0yx4DGoTh2xiHMIZF7S52OCUoX4bn9qKqKR5sZK+XOWxD2hHovf/guo94HDklRqJ7ifDRshTz5wIlav3Zl5GgxUdxea3MmebghPEEm0uHVnvKxVbKBEw5WivCJd8JOyM=,iv:rYFOxaz/Lb0loPNVmXL06BPAl8NzYHn+3Zeoh1YjB+g=,tag:N+qbLLR0YhqJ5xbgTVvLdw==,type:str]
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.13.2
|
||||
@@ -0,0 +1,26 @@
|
||||
#ENC[AES256_GCM,data:/JYNMOHrdMY2jobx67MjbJ7Eg8kHrNrkJcU535NRYLvY5nnSryk+asK8nQ==,iv:lM1jBHIxFkQriZ6BjGRXAlymUs5nX4Kvt1WNxUeZlkU=,tag:4pttiLNnIagcN4jTZ7BTwQ==,type:comment]
|
||||
apiVersion: ENC[AES256_GCM,data:oRQ=,iv:0TzPcIoozs2MXJNXkzgcVtjjBUgfOHaSXQZiD37fb+Q=,tag:I1jwXteT9m2Pvdxq8zNtzg==,type:str]
|
||||
kind: ENC[AES256_GCM,data:zSxoKLqf,iv:Mf2s3h8++Vxqb4JoymHXY4/WAknDZ2GGrVVtKK51JxI=,tag:MrBrvl/FjIzS/AVoIa1rBQ==,type:str]
|
||||
metadata:
|
||||
name: ENC[AES256_GCM,data:zKg/8UiwWslwTcesAQ==,iv:jxbj7Qtv+DRbhzTdvtv+eJuTQPNIf497NZPYA6ld4s0=,tag:HihBcoDLi8j9PB+uC265Sw==,type:str]
|
||||
namespace: ENC[AES256_GCM,data:885ZKA==,iv:4PfWZu5qVGXP3ZzRHMrh5N9dzJ3SoUPPo58ppcDTnpk=,tag:gvBc+uYOmERckrb4KG2Hkw==,type:str]
|
||||
type: ENC[AES256_GCM,data:eqT421de,iv:EZHnf1h1L29G1HOBYBSBeydNe4nC8XiBOw8YEL3kxrY=,tag:ypD8X9pa/9dbyChAMSIS6g==,type:str]
|
||||
stringData:
|
||||
username: ENC[AES256_GCM,data:Oc6vLw==,iv:1+tLTAxrDitXJwCAEccaVQzc9I9lNRgT3FsxO2NPDDc=,tag:r8lNDb42iewK8Soo9gbPwg==,type:str]
|
||||
password: ENC[AES256_GCM,data:Ckc4PBc9tqigmcXl97iFUIqcjPzuJivT0tSmGunIDszFLU3u4UqAnA==,iv:jAwDFvJfQ1GkeU/qpEVUAQ6cWqxYE8nrgs+/RouyUxg=,tag:mP6AoUJP0T78+O9krL/eCA==,type:str]
|
||||
email: ENC[AES256_GCM,data:qt+Sj2rs6l+L4x+kLUSaxlrN,iv:mfkMj3u8W2ZX4N4IH39mZXfEp+xphS4shaJcFOD/LEE=,tag:dD1jpIvTvPNOTer5gsfUqA==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0S3hzMFVxK3M4WVZzYWZF
|
||||
a3krRjcwZlMrNDZ6d0FnZWZpdXNFc2tIYnk0CkVzZ0JBbGREUU0wL3dtSTBFTTNL
|
||||
YTMya0duY1dlTWVadHAwUTB4cUJlSzQKLS0tIGFrWm9VRURmKzh1SXJPb05mSEdt
|
||||
NmVUSVk5SnJGOTRhdHFKclhPMi9tSUUKCNhKWvUOExgirvRg3KaeEE+mRUPI3epI
|
||||
xIYaTsiHvffmjc5mbo2sD6H2/L0h1IkLb78FJQdnTG8zl6yyFzKlUw==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
||||
lastmodified: "2026-08-12T18:02:01Z"
|
||||
mac: ENC[AES256_GCM,data:q46TmZXbALBGfexqqVtLn1YGp0GfWDzq6SqtEC0OujrCExHUyGG6Tb7BtkQDKCl68vkq0HkEwt9tKopGBJhUyC7gPNkXKZ+YmEEEdY84C3ePyvwWCAQ24R6o4Rpg8QURHSf9JA5RmoJOu77OcVMHkOB9Lan2K2dQVb+79WDx5L0=,iv:uQE/b1A1ZTgSCnk+wvwbHo7eWRW/IiKrqG1wlq1aA0I=,tag:WWXtlUi0jagSl/gKTIflqw==,type:str]
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.13.2
|
||||
@@ -0,0 +1,23 @@
|
||||
apiVersion: ENC[AES256_GCM,data:rGU=,iv:w1yJeQvN0MPZlPx8VQZmC6zkRaHW4rtjjROea0Kx9X4=,tag:qgYgVUGMQ2BtN0RZ0nZYjQ==,type:str]
|
||||
kind: ENC[AES256_GCM,data:wp2QP1he,iv:C8c/jKh5pnBOtHqXsTEchGf9DACU/5hOJ0Mp/+Jk1kg=,tag:QUZNeguRXdi3JO6Ov6GMDg==,type:str]
|
||||
metadata:
|
||||
name: ENC[AES256_GCM,data:jVsnAcFTlRiKxDoU,iv:bWEqo28kH3bxzfI3ipiY6dsqhIcl9wIxBjFu0mxVGLg=,tag:PVWTveI8xhvLxvXPldhimQ==,type:str]
|
||||
namespace: ENC[AES256_GCM,data:ZHnVZyd3wA==,iv:3evUnFTQfRz/ZilUQIl/9dsCba3nsX6o/iQsGXMBfgM=,tag:+9kp+VRu1ksroDTbTGmGPA==,type:str]
|
||||
type: ENC[AES256_GCM,data:bHX+Bu9o,iv:8qqNddsuw4YoHAuJfUcPIqjcqNySIh5Ln8OhsfZxuk8=,tag:P7QGUXo9Io2Y19YqlWv5sQ==,type:str]
|
||||
stringData:
|
||||
GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET: ENC[AES256_GCM,data:qW2SQSsGD0YupU2SMzRaYwkLRjXAwV1OJBnhATpCJrOHWbEytw6IphOmPPd3VZKfHncekA4agXi4K3rUPHIx0Q==,iv:NCeW/UfIl0RvHV39ubN2mDfFp7GTQNuFv8KiEF+7KOE=,tag:lisx4h4PqUfLwBX8ca9Siw==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrUkxLMEV3aEpILytic0Ux
|
||||
V2VEV2EvcENJVnNNRUtBbGkwT0d6eUxYeEFvCjZPSkU2MG5qME5jZ01mRVJwTUFL
|
||||
M3M0V3c3QXBoRml1Vm9NWW5JTlNRSG8KLS0tIEJnNlFmdFJXb1BPaVJzTmo1RDQv
|
||||
VXZOVHRHUEZJRUZ4eGZGM1RxSURyWXcK3ZyYCPhRUvpvT/pjPQGJoLIwaktZY6Tg
|
||||
LS0cIDUhjPFbeu7qUATOrat6vMUi0UREbXSFZ1KyAjNAwJZaUusPMA==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
||||
lastmodified: "2026-08-12T18:02:01Z"
|
||||
mac: ENC[AES256_GCM,data:yUBBV7dLEPld9yJacn+YaOT8M1NJ2ploGIxV66aVOH5x4tDAsskcUQJlzApWCQmORuCuMKg6qfpGgLTojfD5msha+ufVVJXHl7ua+STar1/FPJXaHm+z7YyZdsD5j6f3AH8q18DuLy2DYLjXELmPBsp50g7MDJEm3xLhCUXygjQ=,iv:xl0OtA/2umz0YH5b+6QjlAByZWbvfGOmHqomziNjlkw=,tag:xwkQDZx19Lf6QSwU2zPYTQ==,type:str]
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.13.2
|
||||
@@ -0,0 +1,24 @@
|
||||
apiVersion: ENC[AES256_GCM,data:x1g=,iv:ImbG3BggYpU11BV84Kwt1NrwoSZIrsoiZovqPM2ziWQ=,tag:V5clyseKFF/jEUX/Z/6Vmw==,type:str]
|
||||
kind: ENC[AES256_GCM,data:9NYfGQuq,iv:6ICJnhTiMP0QFX2xQxqE59AkbtFXQ3UJwH/v/2KaQdw=,tag:wHeJCUeTz4CkqDE/3sDpJA==,type:str]
|
||||
metadata:
|
||||
name: ENC[AES256_GCM,data:vvZxPCX3S+jdtrkSZA==,iv:Aw9oxB0x3eLODe/XVGKd5A4UdKoW1ChbRM7Un0kkwFQ=,tag:1EdRix+CoNztbtXILUlHJw==,type:str]
|
||||
namespace: ENC[AES256_GCM,data:ZVI3KHMJ9w==,iv:mf2ySxEaRrsPLgkwUUjmJuzklo74t8UTeCsUean2nx0=,tag:tOloglgAJIDNT1xNr//L9A==,type:str]
|
||||
type: ENC[AES256_GCM,data:A3/oiYOS,iv:OMjn8JxX8g/jJSsIL911FX4autWEQDk1UGzfnnfKSjQ=,tag:p/8Rc6o7gfxoX5Lv8lhWvA==,type:str]
|
||||
stringData:
|
||||
admin-user: ENC[AES256_GCM,data:rjpH7gQ=,iv:UwIdUTnI2soFYGjZz6xj8boacSMYHxTg0Bl1xFLllsU=,tag:h2nX82mM2iT3tZu9SV9R5g==,type:str]
|
||||
admin-password: ENC[AES256_GCM,data:hN1bHBVi9SfVzZ1uWA==,iv:4V3wlpMMfakInQoqD6gxk+0A6lWCm3aPw31gpa0sKss=,tag:na4lAI7SzbWTUB0lQ4uATg==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3eVI0b0pIZC83Nm53dEwz
|
||||
TlV0alJCL2duOEFkSlV0bXp4Vmp5V0pwWVZFClNGSDNFeVluV2R2NUpEcEdYc0t5
|
||||
R0xsalVTd2F5c1EvOXJPdHJ3Rjc0N1kKLS0tIGg4c1RBVlpwdEFQd1l3Z0RQYTBY
|
||||
N2t3MVRTdFlPS3BvY1FJQmZlVG5ZVmsKEZx9fdx+p9UpzLGhN8D58KlPAOtyLtVs
|
||||
ldAPmMThTIWQ5GgJjLwmag2NlMyO8NmQY+dd4a//Grx/4bep9lhjTg==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
||||
lastmodified: "2026-08-12T18:02:01Z"
|
||||
mac: ENC[AES256_GCM,data:YHngoakearZDcLH7ACS6Nw2hcf19XvVkthLxoM7KrWIAsa+Izkr/kr3PGgfeuwmQL0lux2P+GPlvLE4VeovAyPOiEBVl2tQK9/pXameqynswRn5wnl/kUMPJblNBtPpKR3jHlKsSD/o1MtQofm2mFLsa0bJ+C9JomAIYMFMKpms=,iv:M20AveeOFJs9Jj0jECODihC/nxIe/rPBU5QjfSQvuvs=,tag:dIDq+yaz6u87a1BLQCw0eA==,type:str]
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.13.2
|
||||
@@ -0,0 +1,23 @@
|
||||
apiVersion: ENC[AES256_GCM,data:4OY=,iv:0Lgui0+X2oTlgCX5HEIIihEsGJD0C2+pDIOTCNi4r+g=,tag:uL7vlreaHjcLJjV7e5I7PQ==,type:str]
|
||||
kind: ENC[AES256_GCM,data:x/ltkind,iv:KRBfS7COsTs/l3Fhyk5FvH7IVc+r/6M6FVOo+kPDe1Q=,tag:UuTbe213hDfK/WUtKS/doQ==,type:str]
|
||||
metadata:
|
||||
name: ENC[AES256_GCM,data:LpOEecTJBuGy5PqNSFM=,iv:Q+DCLGtw3wihhdAgEbzYHyQhFTPWFyE2iJKl9mYaA2E=,tag:E2wrig4lRXGDvSCHec5clQ==,type:str]
|
||||
namespace: ENC[AES256_GCM,data:6kMVCXaF68NO,iv:gnCCkV7GKXA2HWOOeNUGnpAycf8U7pl6F8Vfo6DhLR4=,tag:0VdeySsuhUr2heXyGXZwBg==,type:str]
|
||||
type: ENC[AES256_GCM,data:6muC3Zqh,iv:gBaC+6MXvZY/bIpy/cEG/zWwLBaUFMVfxAHa1OnwfnQ=,tag:v6NYyhAKAwovluHAXNaOVA==,type:str]
|
||||
stringData:
|
||||
SECRET_ENCRYPTION_KEY: ENC[AES256_GCM,data:jX9ULlaBYTSTFGRMplSder5rMrsz7THU3kgJSGef0r5rZvtoaAG9NVYU2QUEuD0sZgfqRooeMOkDCAqFc8qsuw==,iv:uOmx8w3XPKnoxfasf7gqi/bljxigpLwaAC30c2TroKg=,tag:Dmbu6m3+UZa1w0UR0LRh9g==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6TDVyNGRtYWgzMDYwdjdr
|
||||
NXJWcGJZNUx6YzBGWm1nWlp0SlN3WXhaR0VBCjZ3bDBmUTFCUjg3U21wak90eHZK
|
||||
NlRCTUZQSHhoS0ZSUGZ4UHhST01KNmMKLS0tIGUxcGo0NmJ2bmJ6eGJ3QWxzYVM5
|
||||
c2Z6UkFjQmZ4ejIvK1JQQkZ0VFFIZ3cKA8UzmGsX+s3yOermOHqbnnEtekHCTqmC
|
||||
R3Jyzf6OolZMJpNwbetcsOfgO61aM7LHl/Xb/hFLbLjZ+eECrt8VpA==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
||||
lastmodified: "2026-08-12T18:02:01Z"
|
||||
mac: ENC[AES256_GCM,data:HTrEEVDm8JqnVBFaY/FJknxma0nI95tRiwVc0K76k+2R4jgKCBA3EUAzPVS+gA4rTAeKHPSHrT2eidlkseT2WQUjqMRrpHcUsbSjNfpTEY2g/U0PIiOXZMRGfwmsQVgmu2fqeMOyzDSyya0scdWJXPraRPNZ+OpEkNVlm4rWcgs=,iv:KY3dnnmooJgsu66wc7gbzeIGUXZNgVrxAhpAwxoG+G8=,tag:7r6d41oTD136N57rtY7auA==,type:str]
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.13.2
|
||||
@@ -0,0 +1,24 @@
|
||||
apiVersion: ENC[AES256_GCM,data:uXc=,iv:3EeP5hzIKy1MR7HAcN361qTju4CuiQGXM6aqmO6Wdj8=,tag:uYyXfWL22mjvas2ZJFhU+w==,type:str]
|
||||
kind: ENC[AES256_GCM,data:hUO6As0B,iv:PUdCdWZSB0T84G3lpMASZMGDMfcI6kOOEaFxMleQMM4=,tag:By5NYpJcst6Z9o3q+X0Mhw==,type:str]
|
||||
metadata:
|
||||
name: ENC[AES256_GCM,data:0Mv7X6WZptcURsRFtPQl+50d,iv:r7S5dVjCVofPZxr3k/QNKUJZ9r9I6bnlovHuczKTe1I=,tag:i9/aS8zii9RSFvOu9uT9hg==,type:str]
|
||||
namespace: ENC[AES256_GCM,data:Hiu7GvRvEgzjOwlk,iv:a9k4Dza2N3jDgW0P+mQFO0tnebqlFdgDz8VoxCBaKXw=,tag:mdpj/9p2w2Naj2qqskgJLw==,type:str]
|
||||
type: ENC[AES256_GCM,data:tT/yme90SyCR+l1JfweKJrc=,iv:vgtvyP+ssOOD003IL4uPY3L/LjxCsWJXaVE4scCeB4E=,tag:C26aKBoXlAluF8x2QoqbFQ==,type:str]
|
||||
stringData:
|
||||
tls.crt: ENC[AES256_GCM,data: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,iv:XF6gBHB/Bt+KMgSqjTnrE7OZNdsL19a0Eat35cXkmKI=,tag:0VprN5n4UNxo09nmJxI6pA==,type:str]
|
||||
tls.key: ENC[AES256_GCM,data:cr5MDAnBb3rA1PipHPygx1HDbnvcR7u8UNTAVDgNxcu/rTENHw1EI8ADRDk8aAjUqJLfpo9U0DLaXEKjByrvsBfpu+JXAOWwXI0nOtzd1JAOayLL4nmJiji6uJ+sH9NHC5UmhWM4RHtBmPo4uAsoXT5kKTSLEH/zKKSmutLvRdo9GaoKDU75ythOVM5uOvtc0fQ7gAepzd+f84uq757ifRN28yZCqGZG2+pqkdJZZ83K2cU3UtMPHwjPJHoG2ePuE2KsJbIj6dArgBMnMkUh6auC/ZafHak1htlqva4BxemDEkK4fkHPtTkCNOi49RDfY2yeCfPwRKAoUG6XVgiU/MZXqgf+mIbUasHZtSbmxPErkdzJ1FgJsCgw+wcIvh4pM4X6VlnXJUkS6NrgM0Hx1YcCdsTDInAh9f19l0X8oBLd5fqnoljJq66jgMXJg0oUo9zFDrSJgjL9RAOuBZ8PmLwi/uM2hgtRCFDgJo1DMqmleNZQyacKqEeRbcc/FjB0Yd/32SpZmYPlg4rV/ELATkl+GpsjYGm9XhyMhmNcVDnSwvfn3a9DsIX7Oj1BbQ3aRB/yjJpdd8HxBfYrm9UVhlNMxmzp+hl+ZVcvYeWqcnRo2bu0bO+AiSWR/sSVk0gJq7mE7cT28vcyEYlo4NW5gAdN5P04HzuO3u46Dkg03cCMmHrpre0FVQadiaY7Jgr41xI/8/qR4U3YZi9zT62kFmUTc4q0RybYCpzAn0PeHpZHY+t8pSlA3uHajVBe4AzqITZb5Mm4A2FRkdnfpDlkXlr7sgAmwez6HALs3jLtNo5HWk1FS8tRwwTBRKa9LTZF/myCZhGlVTA5q7xJqERqRBlyU4Z49PeyAFHsBbcA3POcWf7VFYJN3uxiIqdYE75rE7spu78CR60Rn44YCaUdMEnOZLILT++rvW2qZTk3+APzD6mwDHZHYHcVvgBEgp50CKwyaFIsi2KZWR1CQYZ4ReSWCohI1xa747h3QeI/aHInijmBuv2pCnfYEcKxm+sca3KVbDLh41lfxA3XNen6uQn6Ndwuh8oSw6X59m489ODkfloyHZNyyWMNawIaDT33CvFgDLHA3+leUlfShl1W8Z9WpxuJ8fSD92OfAPY2MI1MdiccdrOZOKAkDqoVUx0jBMIgabxa5zXTCGsAlrvH8BxD4Y04pZvgsOdESRptCfgDJQkFuHCM94Odg08wh/4ebb2GJs/BWPJN6sQzn7yQQeGGnmss68dXNTg6Xgrr52Cajr24DwFJAEBazFNIOo/NelDI9lBmgltULcJveZm3Fft5Z4+tCvSpH9Ly7Tjag5j7ACIkXkexBBKV/9dOT8bfz0uKEjROnHdxocqwdpNN48J66C4FrkNgUTGayicBvlRk6JgsvAHv5ZiXPnUTj3Rc/j3PcRJfXpU88a9ngZw+MrqwEyPbFcgeHLebRlLU2HE7Duwei2fdSv+XZxARGwCLjAJTCrndMl/BK0qK/8kLkK6t0OHS8ANplXyyegcRgDyPFwUA/rDq06KkJDipaPeCabQlDSO+ah6U1409P25HuRGXGUMyE1UDgSRwJHXJogdtTpg0A+r2C0qwK/gr9Sxfq0ViNM/Xp10lmoVEXKWfmwxDep0fyuhAzPp8E76RJcpJ/TKDBiSwFtiP/rUkG6b5TQcYRidjHq1G89bmzH+4NbReSRvu0tFWZh7L2ypC7ChAZHbw2jNtdA6vD3hxbp78co3bCtXjuK7HnomXjKTvK105HYWAcNL4h7Xgj1YrLLgIrTr+5hkO8BmCAAf97pa81mWF3sYmOzO0qUjleOi0UGa9MGKuZ/n9jwFXBbtcLLYRu1iabfKXYjzWNaV3kLenwxe5u+Z6S+GtzNou+XQb6nDVpcuBt9FAGHN+ChgRpifbpb/H9ANwrLyrx0wQXv+QbhsK5VJSue8/vCQ8uyq6w/T2nCk1um/MZTt7L0pniWBFaI/+xYPJoaMAbl/nwaRLgWji9qzFvAaaUJztlsEDgjcmHJbtbjWgJNrVljcX1w5J+WxHplvtazLlkfriNSgFughVkeRjZVvkIHR72JOGUPosYEK1flmoMzJOubn0+AzxDjtfitGeD91pQJ2xDQCcAStyYPsHwMRXZb30kmsSK3bl9oPFvLjuWxZXgttrRWO/z81NZxjXPuzxVgs4zp3GmHWJKDteO47OEdTuEg0GE44O1UbPfADbufkFeer9NeZFKCKCC8VerpPoqS2dtPrsP75zATpuUz+8au+mVI4VqRmM1sYOxXPkBCAH1Gp3kN8b9VDaghgcCmYa16p5mHddry0ETqNAbWFjoRiLzDqX4Et/fZAqjJkYkpTms3B+79s5ttSNxdrBxZTbkVgrREy8E1NG5RCdJ+OS09BmaaL6FdfTNgo2XyfByzW4JYwTRI8Y3TF6d52ZmCh2vT7IYnpRLDpcx4rmYOSIWBrO5w5SORv3n1GV/fqHV7u35z3z1vUpJLvAkZMGX6UCu/1vV0cF4KdeGfndTHpgkMueTw3Z2TawNRyEZ4sSEPMf93w7PbDwzpKmggTuKJJjO60gem+Tpeek+Dx0AoACsqAbfNY41vv8+dN0jEPCYeBBZxBMTwDL61YNzb3hOzugBLRHVzi0g3aCJHLnQaD+GS3v1b731yBzZjWntUi7GITSLhz5JCBZZ7hOo5StNvj0qGfOyD9ZURN+wNKK0dzezv4F5WgjNtkKCBKB7Bjrk/46IygmOrJXbo+2hr0tzWDT1Dk6X76hcOzZlpjvDGfgekkUegD8oUAB2fA/qKK7QfCqb26h3GUT54yhVG59rKbnMWcZ7hjojxosCvDGauZYXC1JfXGfKHrYSufwBrHMISg/kDEPtUnfDr9ZRecH/PfMFlRbd8TySTJdiuDkMi21eAELhPOvXmQ58Mo2Fn6Hz2d2uTKHVqxqXzaw+VKxV6oIXrO+fiVEnQGol1QTsUDmB5syFzGQvTr2jnB0oKiH8JE5NUzn2jO/EUL/YO1Aix/7hXJezN4SkRD2USEYp05fKbZ94qw2maUn9Suz5sJJ6EV1AfVBuxnGpRwBoj8IF8O6oRUcPorac0LhrOIJjbV4FfmxBomoH8VhmrhlhmydaYo+vfarbuKeKqP3hdSnnfoQuXG7vzEbNKPNwQgivc0I7okkoSgwfB0mKJ5BEvHcEe6DLU35C44qNXTYRmE8GAEgab82ZpGDMbtVHP3KOp6YcgT88kwPQ2kd9SpPvWLUDyWO8lCdQznrQjXl/pQSDLIEJ4Bg5V1dA4WiRuGPwoYMvHQqJzFkfMmj+9vn+qhXCAcAYhq8YthLZzqTAY+nGqYWv04krYD6Yb6o/NsFSD189IBT0V33cLZtqi+o+eixOcpKdqnc2iFLnCjqRKRmTbrQw56/kIpi1bwVumkhdnfWsi4DI6s0x4V1/wzXd3Mum305cK1MXQG7j17wmNO6eOPYPOCEW9bcW3ZRhaeEuWRR2eSC1p0ULCpzIYVtAkKee0WTUGlFPMlt6zhF20pclVWAIGOVtW5rKhX1B3hptNLmPtpjn3+aBwI6U3W0vS00xyBArUbGOKp2rv0OzNjMX01NN5Sh+dErypSWP71GTHOoTUCpuRhsyc5x4wXdsbabieYEGTw5VldE7OI3jARnYeKcgqCf8QgSEs43KYTG+cSCD6tp7bUnxtIhBPw2h34a5iQ2yv4twr1iOpc5lByXa8UUasON4ugKoUjlqvOPHsm+XrvvnhR9EoyPxU9UtnN4snP4zeCpiV7E2jmc9o/DX9iigSo6sMUG9B9fbns/QfC2reuafWO4C73egDzZT3lGOGMVrLaC6EmoHupy5VNHtvBv9az2QjS3MGbKY0FEmIrxXgVMgPjlSTMnqfM5xTTIqbPMDukXTITmmqebVxXAZKWVA4NHeYTkjEIk1zfMqVz5ILj4htc1r/nYxW9K6Hsdx5TzmDB50odk/WfXYent8+cEUBkWOT4zRX/2R5ct6CI12x5+Gz3qbuHIqelIKJJRfRaPXxjzObgE7cHFJGrnn6XOoVHSk+Cjjxxnu5Iy0DvfWfLBDfwZpp+9exw8KvihJBVFogQnFRa4Y4sDatjif17ShGAVlQoxLdk22LcX0AdR6Kmo6wMYQ9ECtO9uiwKvH7147bAu/xIlFCmfZhVAkXndHrCz2GOT2tjSQ4i66uHbpCYfypOc/RCMjM8yr0AE8tYiyIFxfY88sKzgbjvg4/+HJ2aRX3KXb6JmL2pLXV3TXcrDenqFoXrjTCg8OBu8kJgZHigYvo93ZVAJgKPfey5TqAaiQ7DqhJ8rrsqx5CFqdKSKLlN+NdO3SSZwR3pspxVa61dKDirwucGKjMXXeBEydoZjz3QC4cL2f+FpVOA=,iv:z03p38PcVSVeaQ/1SwCR+HGxfzBzSO9lBdToMHL3Jao=,tag:XqJOxKbpV40TTe5yFftyqQ==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhZUV4OHZXMXlrWkhoNHBC
|
||||
TjJXZ0NUR2RjaGtpbndPRnZsM05aY1JTdG1RCnhtSEQ0bndQSEd0bTZqN2FuaUZD
|
||||
VEw5bXJyNm80SnNzdndpMTVlT3J5WFkKLS0tIElIL29oYmdieXkzV2t4TGNPdndB
|
||||
SmxENFJqSTNJbGNPOXBoMFZDSUdvdzQKrGQ5lgtYG/+xEVXP/Psv9lMTjigSrgtt
|
||||
8VrLRiNfmAiGh0xnDf6utnYID2fW2W2wge44LCwyBmEzA5hrxmBvYg==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
||||
lastmodified: "2026-08-12T18:02:01Z"
|
||||
mac: ENC[AES256_GCM,data:JO+y7pahW1f/GZ4u/NUMmMHO652bCtubc3qM8pgRJYjcxLcD+tYlwkDEzbwW4wnTjrU0t6CJzql4vo7jJNzARuVO1gSCri4Lyfs4o9Ejwoth57npjD/eHeptciMrrZ3l0aaRX01vXGV3oV9cgVvcuX33/a0xz7A/1grNdjUBh74=,iv:T8dYqDhfHsoGb975FdghI5HLxHGXOhY/ZZrIWBW2q48=,tag:9U10qwnGfcxshMEExpT3Dw==,type:str]
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.13.2
|
||||
@@ -0,0 +1,8 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
# All homelab SOPS-encrypted Secrets, decrypted in-line via the ksops generator.
|
||||
# Each *.enc.yaml carries its own metadata.namespace, so no namespace transformer
|
||||
# here (that would rewrite every Secret into one namespace). Renders exactly the
|
||||
# Secret objects — replaces the old argocd-cmp-cm SOPS plugin.
|
||||
generators:
|
||||
- secret-generator.yaml
|
||||
@@ -0,0 +1,72 @@
|
||||
apiVersion: ENC[AES256_GCM,data:Mdg=,iv:u/JjNJfdyz7ehk8lHZRh1u9zkNuufHosyXv10Gm+T6E=,tag:pkgZVJid6kpGuy61+oEMlQ==,type:str]
|
||||
kind: ENC[AES256_GCM,data:/kWhhqyz,iv:DymezGpBHmKT3BM/CcUKEGIWZw/JXNutReSKfhfmoD4=,tag:DnA+316Z+0eqBWN8YLyv1A==,type:str]
|
||||
metadata:
|
||||
name: ENC[AES256_GCM,data:xs1k//nWy1iJ52Q=,iv:NDGvM319FCypxFLWwONcF12osaU/EL0IwD0c2xtqYnU=,tag:6IhfISF08WQbxrUmT49d7g==,type:str]
|
||||
namespace: ENC[AES256_GCM,data:jpUzI7BmZA==,iv:PQrfm67la6RJCRq0H7qpiY8n2hPUjcaK6gmJ/zPQW30=,tag:bp/3GYbRpYOIub5nT0zz/A==,type:str]
|
||||
type: ENC[AES256_GCM,data:fndXB4Y1,iv:EXOe0day1ScxvZ7ozn1QyHgaZgnvlPNmvSQG74aw7lM=,tag:quPmKvFTjRqtZoVUEoQAHQ==,type:str]
|
||||
stringData:
|
||||
config.env: ENC[AES256_GCM,data:3RIQ1i6NtY1Tv2eJY8JXSgfBEqi9px/9TJVNrPf9+brtGy9Mx3SwjKVnjGXUcA2cYcNZb1JR7temXmznXQdsRfZ9yohe4oc1vL3yPGPY9YfP7AHGYj9E7tghu/rgkHOf93RmfdKv0Rrq6miBcA==,iv:0RQVMi2mMHBRTJ1OX6IDFvq9Qr7zpqgQzt+MPPgBIHA=,tag:HNXLKf5X4P3E+hc7YbDtNQ==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtUVJFQ1ErNmkzd1N6b29t
|
||||
L0VWR2tlcEIxeG1CR1hXRkw2cEt0Q2crMWlVClg2UlNhUzdJZGpLZjJtYlAvbk16
|
||||
eHk0ZHZiNzVRTWhyQzlieTU5Y3QraGsKLS0tIHA5UVhvUXhNSDk0QlV0R2RzR1dP
|
||||
azVEQzgvSFNwak9TcW1USFNOb3RvSkUKNLuW3h3cHDSSCZGe9Vyiv5m+wXihtCYX
|
||||
oJtbRK+kJF8oOUo4emI+SLGrCsWq5cG2wN/wgP+ChR1zUgRgfq5oOA==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
||||
lastmodified: "2026-08-12T18:02:01Z"
|
||||
mac: ENC[AES256_GCM,data:hQfimKuhfiIiZQAyNDZQR25HZ5biU+kaWig3ElVPiqMY3B0LrmKyOEs7ittd3j3meUkPEFSmm1yYSXcdCuf6w7cwSbEiL5DG8t7QKPbnx/aRdyHAJW+1VC0e3Lye43gaHya0iUaWS/YFQcrT01oEbckLIDWPKfvA6pg2bZ4kMZ4=,iv:AydyWMVcjTQu+7Fzw5vtqkvTTeQEMt8y6snESoLUDE8=,tag:SoKklNqa9nH9G6d9+PnolQ==,type:str]
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.13.2
|
||||
---
|
||||
apiVersion: ENC[AES256_GCM,data:Mdg=,iv:u/JjNJfdyz7ehk8lHZRh1u9zkNuufHosyXv10Gm+T6E=,tag:pkgZVJid6kpGuy61+oEMlQ==,type:str]
|
||||
kind: ENC[AES256_GCM,data:/kWhhqyz,iv:DymezGpBHmKT3BM/CcUKEGIWZw/JXNutReSKfhfmoD4=,tag:DnA+316Z+0eqBWN8YLyv1A==,type:str]
|
||||
metadata:
|
||||
name: ENC[AES256_GCM,data:XEQHsQqTgwukYw==,iv:wTw2eoooDA9EfB2df3jzb0IWUdtLSwcuKzx8yDBaihQ=,tag:oncXt2gM1k6Qppafpu/D1w==,type:str]
|
||||
namespace: ENC[AES256_GCM,data:jpUzI7BmZA==,iv:PQrfm67la6RJCRq0H7qpiY8n2hPUjcaK6gmJ/zPQW30=,tag:bp/3GYbRpYOIub5nT0zz/A==,type:str]
|
||||
type: ENC[AES256_GCM,data:fndXB4Y1,iv:EXOe0day1ScxvZ7ozn1QyHgaZgnvlPNmvSQG74aw7lM=,tag:quPmKvFTjRqtZoVUEoQAHQ==,type:str]
|
||||
stringData:
|
||||
MINIO_IDENTITY_OPENID_CLIENT_SECRET: ENC[AES256_GCM,data:IYBfNW19cTo8WkCGT4zuCljzi2bkbYWJ8DY/yedR2MJNqEO+bMVvjx0OqSqbPp6rnwGyMQOhBN0gXPbEVRDBGg==,iv:I1aGIikbHTKvh//4Inhp7UoNfhjlIXSpcyP4RqljvqM=,tag:Zh3Vh5DQYAsTtiW59D0/QA==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtUVJFQ1ErNmkzd1N6b29t
|
||||
L0VWR2tlcEIxeG1CR1hXRkw2cEt0Q2crMWlVClg2UlNhUzdJZGpLZjJtYlAvbk16
|
||||
eHk0ZHZiNzVRTWhyQzlieTU5Y3QraGsKLS0tIHA5UVhvUXhNSDk0QlV0R2RzR1dP
|
||||
azVEQzgvSFNwak9TcW1USFNOb3RvSkUKNLuW3h3cHDSSCZGe9Vyiv5m+wXihtCYX
|
||||
oJtbRK+kJF8oOUo4emI+SLGrCsWq5cG2wN/wgP+ChR1zUgRgfq5oOA==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
||||
lastmodified: "2026-08-12T18:02:01Z"
|
||||
mac: ENC[AES256_GCM,data:hQfimKuhfiIiZQAyNDZQR25HZ5biU+kaWig3ElVPiqMY3B0LrmKyOEs7ittd3j3meUkPEFSmm1yYSXcdCuf6w7cwSbEiL5DG8t7QKPbnx/aRdyHAJW+1VC0e3Lye43gaHya0iUaWS/YFQcrT01oEbckLIDWPKfvA6pg2bZ4kMZ4=,iv:AydyWMVcjTQu+7Fzw5vtqkvTTeQEMt8y6snESoLUDE8=,tag:SoKklNqa9nH9G6d9+PnolQ==,type:str]
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.13.2
|
||||
---
|
||||
apiVersion: ENC[AES256_GCM,data:Mdg=,iv:u/JjNJfdyz7ehk8lHZRh1u9zkNuufHosyXv10Gm+T6E=,tag:pkgZVJid6kpGuy61+oEMlQ==,type:str]
|
||||
kind: ENC[AES256_GCM,data:/kWhhqyz,iv:DymezGpBHmKT3BM/CcUKEGIWZw/JXNutReSKfhfmoD4=,tag:DnA+316Z+0eqBWN8YLyv1A==,type:str]
|
||||
metadata:
|
||||
name: ENC[AES256_GCM,data:rYX7nN6SYoG5HycaNNrprDM=,iv:4uX7+Sl1UzgsImBH+qm9p8DlOfJu0i0W3bpoE7cFxXg=,tag:RROCnYBVKVwPBNSGgV30FQ==,type:str]
|
||||
namespace: ENC[AES256_GCM,data:jpUzI7BmZA==,iv:PQrfm67la6RJCRq0H7qpiY8n2hPUjcaK6gmJ/zPQW30=,tag:bp/3GYbRpYOIub5nT0zz/A==,type:str]
|
||||
type: ENC[AES256_GCM,data:fndXB4Y1,iv:EXOe0day1ScxvZ7ozn1QyHgaZgnvlPNmvSQG74aw7lM=,tag:quPmKvFTjRqtZoVUEoQAHQ==,type:str]
|
||||
stringData:
|
||||
CONSOLE_ACCESS_KEY: ENC[AES256_GCM,data:FhXl6yqTIzHsbJO6P96KQrA=,iv:gGTaSKxk721GwMQWWyymqUPZlGLidrBzWCWdRtnlOr0=,tag:IaVl8GQqPstBuUjD4N6JTQ==,type:str]
|
||||
CONSOLE_SECRET_KEY: ENC[AES256_GCM,data:s22GOXY4B/m+S7tgDw8P2gU2F15vdn1tqAp53FWzFTI=,iv:GXBhHQ8YiaVjRRMw2yG4FxdulVOuOurkLXXC0u/SFRA=,tag:pvHcD9+4qaxnvhOSkNxoHA==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtUVJFQ1ErNmkzd1N6b29t
|
||||
L0VWR2tlcEIxeG1CR1hXRkw2cEt0Q2crMWlVClg2UlNhUzdJZGpLZjJtYlAvbk16
|
||||
eHk0ZHZiNzVRTWhyQzlieTU5Y3QraGsKLS0tIHA5UVhvUXhNSDk0QlV0R2RzR1dP
|
||||
azVEQzgvSFNwak9TcW1USFNOb3RvSkUKNLuW3h3cHDSSCZGe9Vyiv5m+wXihtCYX
|
||||
oJtbRK+kJF8oOUo4emI+SLGrCsWq5cG2wN/wgP+ChR1zUgRgfq5oOA==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
||||
lastmodified: "2026-08-12T18:02:01Z"
|
||||
mac: ENC[AES256_GCM,data:hQfimKuhfiIiZQAyNDZQR25HZ5biU+kaWig3ElVPiqMY3B0LrmKyOEs7ittd3j3meUkPEFSmm1yYSXcdCuf6w7cwSbEiL5DG8t7QKPbnx/aRdyHAJW+1VC0e3Lye43gaHya0iUaWS/YFQcrT01oEbckLIDWPKfvA6pg2bZ4kMZ4=,iv:AydyWMVcjTQu+7Fzw5vtqkvTTeQEMt8y6snESoLUDE8=,tag:SoKklNqa9nH9G6d9+PnolQ==,type:str]
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.13.2
|
||||
@@ -0,0 +1,17 @@
|
||||
apiVersion: viaduct.ai/v1
|
||||
kind: ksops
|
||||
metadata:
|
||||
name: sops-secret-generator
|
||||
annotations:
|
||||
config.kubernetes.io/function: |
|
||||
exec:
|
||||
path: ksops
|
||||
files:
|
||||
- cloudflare-secrets.enc.yaml
|
||||
- forgejo-secrets.enc.yaml
|
||||
- grafana-oidc-secrets.enc.yaml
|
||||
- grafana-secrets.enc.yaml
|
||||
- homarr-secrets.enc.yaml
|
||||
- homelab-ca-secrets.enc.yaml
|
||||
- minio-secrets.enc.yaml
|
||||
- vault-secrets.enc.yaml
|
||||
@@ -0,0 +1,24 @@
|
||||
apiVersion: ENC[AES256_GCM,data:cM0=,iv:KFms9ElUhHn+w9flx5nzLfwvfJsMN0u8+YDMqFgB6V8=,tag:7Ve53FzTefhTYFVwnkT/iA==,type:str]
|
||||
kind: ENC[AES256_GCM,data:khv7iEsd,iv:rzn3Pt2pJcbDj55NYafUamNLTBrtluUPeLKorzpskGA=,tag:0PbEGGlxwz8ixBfwdOPi0w==,type:str]
|
||||
metadata:
|
||||
name: ENC[AES256_GCM,data:jgWuWAVI4nQMy8dkJXZI5L4=,iv:f9pwyirRf/mLqr8LhuNPE53guP5mlZmPftNhtFKSbFA=,tag:YWX+qDU1z82FGSw/Wc3nJA==,type:str]
|
||||
namespace: ENC[AES256_GCM,data:j77p,iv:rkU3kw12xPeVkVRn3w8WIZlc0+11jGeg1jZBX3kRfaQ=,tag:c2MrHHI4N8CeEQYDAr5wZg==,type:str]
|
||||
type: ENC[AES256_GCM,data:F4hK9q+O,iv:7gmqUtqcYzDHp99fYdinL4yYSTvjoyHlTnhHbEynGQY=,tag:Yuw+B+h81bbZbWcd1zMSsA==,type:str]
|
||||
stringData:
|
||||
access_key: ENC[AES256_GCM,data:SFP7ZsrqSJXbaA==,iv:QuGF69veC8FWOSAbwzv7vhKYkF0yOp0ty/U0hdmroAA=,tag:5VNvfVONHySMbYcYnwSajw==,type:str]
|
||||
secret_key: ENC[AES256_GCM,data:WxvqVZJWTckEb3paILxUJ51hkg0aNzRJzziuopsCpY/Amita3zXl91VJtGE=,iv:dyKnNC8255FCmOd61xczuk0Ww9MYZmHCDc+JY60AjIQ=,tag:rzem3XDOj7VGaYuhk0dc2g==,type:str]
|
||||
sops:
|
||||
age:
|
||||
- enc: |
|
||||
-----BEGIN AGE ENCRYPTED FILE-----
|
||||
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkaFFHVDhicUVPWEZHaXJn
|
||||
eGc3WmdUYk9mdHp4RFExazRhWHBDa3VLN3gwCmZCUFBJaHRaSmtPRGhsQkRHSFJt
|
||||
U2NUMUh4azR3NllLWDg5ek94ZlFSYU0KLS0tIE1BOU1IMVAveWtKaEE3QWhFeXp6
|
||||
ZGd0TVZxbldTLzhHK1YrQUNCWUJVZlkKzK/aF0+qohgujyKHiRpQ+YYsnfVkvzDr
|
||||
+3VnWcU1dPH63wqtf10LeYnBq8ewesfkibOVlJx0v1z6nQ9ZTMXwqQ==
|
||||
-----END AGE ENCRYPTED FILE-----
|
||||
recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
|
||||
lastmodified: "2026-08-12T18:02:01Z"
|
||||
mac: ENC[AES256_GCM,data:7JKz0tx066VLgwnpgA2/aUK/A7KD5y2PZJUqRNPMfEmEFqpkvm3Z5Ejj/kxmqYHwsXL+P92SrvMnbqq0v5I6PolR3fPW5fT/xcLibBmvoh8HF4wrRoaElK4ojTNDYJHginy/NE34FwL6sgDCbtT8QAJl9k8HEwxHlfBeyzzryaw=,iv:oTuLhckDQlvLHhGYNrpU0CSQB4Bunv2XvSsD53Z+yZQ=,tag:7CEOFC5t7vbFUQvencL/sQ==,type:str]
|
||||
unencrypted_suffix: _unencrypted
|
||||
version: 3.13.2
|
||||
Reference in New Issue
Block a user