Story Crater Bot
9257525b38
homelab-ca was referenced by 6 manifests (authentik, forgejo-runner, blackbox-exporter, management-service) as a CA trust ConfigMap but never existed anywhere - not in git, not live in cluster. Generated a new 10-year self-signed root CA, wired it as a ClusterIssuer (cert-manager namespace) and distributed the public cert as a ConfigMap to every consuming namespace (iam, cicd, monitoring, sqs). Private key lives only in the encrypted Secret. Widened cert-manager-issuers' directory include glob rather than creating a new Application - destination.namespace is just a fallback default on a plain directory source, not a transformer, so it doesn't fight with each ConfigMap's own explicit namespace. Also adds grafana-oidc secret (GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET), same pre-existing gap as grafana-admin - was meant to come from a deleted manual script, value already available in .env.
150 lines
8.0 KiB
YAML
150 lines
8.0 KiB
YAML
# Public root cert for the self-signed homelab-ca, distributed so internal
|
|
# services (Authentik, forgejo-runner, management-service, blackbox-exporter)
|
|
# can trust certs cert-manager issues off the homelab-ca ClusterIssuer.
|
|
# Not sensitive — public cert only, no private key. One copy per consuming
|
|
# namespace since ConfigMaps aren't cluster-scoped.
|
|
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: homelab-ca
|
|
namespace: iam
|
|
data:
|
|
ca.crt: |
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIE3DCCAsQCCQDSaKg3Y7DQkzANBgkqhkiG9w0BAQsFADAwMRMwEQYDVQQDDApo
|
|
b21lbGFiLWNhMRkwFwYDVQQKDBByaW90cGlhby5ob21lbGFiMB4XDTI2MDgxMjAy
|
|
NDQ0NloXDTM2MDgwOTAyNDQ0NlowMDETMBEGA1UEAwwKaG9tZWxhYi1jYTEZMBcG
|
|
A1UECgwQcmlvdHBpYW8uaG9tZWxhYjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
|
|
AgoCggIBAJHgqiAV49ZPDxuAzLs9gcKfUlcVkD7rWaHUFVG95nvbJ8FOXh6tVwha
|
|
TN1scv/AeIAtTEmBgnP5Tcn+PpbsLRAVUjPqBc89jZnNNHBfpGiX5MgKdlQKgxI/
|
|
SDx3sUbk4KfFU6WPv6b8pV2sAhs4a+kztt9UJYRTsCnVHNImuyOCJxEiiT1bm8Xw
|
|
vrJqpaYOJ2eNarfZXIxCypseejbD10khUwsTMk0KIA+ygG0yIOi5H9MOcCgDfd9h
|
|
uTNKCBexiUZuI6PdG7Vf2p+t+OKciKGS+3kHsoc1pU95sFtj+3uhPKmTRKQYHTY2
|
|
N80IbnUfv8bHRmeTrwDWWQTCLkhceYw23V/uxTczRlD6k1Z8c7y60wSsOFlWpWjA
|
|
zQmzF5Ci87I/gzoSOYhOhzE4xZ6r3+xyt9X33xxDnWh7w/otM3CGw33YwzmH5HZm
|
|
j6/m521ts2PrUhbZ1lTJ+H8GSNVfpQzZ8VbO6WlWC5vohVBTub+q3a0BKYL0bHWG
|
|
26NmHlxWLwGGaBA88KOLaaA+bQPA+8A46hUFJrpuejrWla/Pb9RVxphH97SYW3Jn
|
|
lzpvs5tbtPGV49UdPjVypE/abaRPQfq0b9mfmBSoedEGRiFmrNq7Kknzj35nWM3z
|
|
YFdjJ0zpMKrVgo/om0FpcAsndVzyaewwQsZCHiN9eIgRoJVLrc3TAgMBAAEwDQYJ
|
|
KoZIhvcNAQELBQADggIBACM5Tej+FUpluKvWWa7dBrlBcnjp2hRJX7Iu/vBoH/br
|
|
dh1Rm7n/JmXw5foWHAH/6Ijv2LlZeY7hiHeST0MNfqWuMPGII/QCqwIGat+A/p1T
|
|
ELOPeQPsyaDuZ5kbfxYrXQNamSPAPW+bsd4U14HbXpr+u3vhPLPuZ0Ptpy6w9PqY
|
|
Rgv6IHcdJJNGkBsNeTDjGwyyd6IsmeH/OkEjHEKBe/e9KDpYFdr7pHRU/8RYxwy7
|
|
R3LF1J3f+9k4uwbP4A232AsIDJLKGnYwGiA9lhkbQ6pbl0CQawkfyUrAyRIG12uT
|
|
TGUk2gh6jNmR31EA5cPd6iHIaiMNsFxoHzGtCoO2xt8DYZzJC5WzNYYjlhXaFz23
|
|
QPPueCUMsXZNB91UzV1llR+uGJMePqm7jIyeUxlKCOlwG0IZqE3wkZ43WV82iZuG
|
|
ybRbwyVSKTlY6gp6d2K/FYrIkc7gwb3Dp6N1xPUTjPetIQgBLJ7DqMS65HhM3lOU
|
|
PN5PgewgyWq7w2/M8PN9gmIBhToqKgQ+5ZjSGEx9LiSdK2edXko+Nmoqs+9jpxBj
|
|
G/s9mcdhNcf2zc4t38vF+YkWMJYDxUwZU3+CoO7IcdJar7WL6puJSjt47iimj69w
|
|
RMUbo95shNurlEB4i8T6SHexnc3IW6t2YBz0GZNLgmdZobQKhszuh4fWR3wCO9/T
|
|
-----END CERTIFICATE-----
|
|
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: homelab-ca
|
|
namespace: cicd
|
|
data:
|
|
ca.crt: |
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIE3DCCAsQCCQDSaKg3Y7DQkzANBgkqhkiG9w0BAQsFADAwMRMwEQYDVQQDDApo
|
|
b21lbGFiLWNhMRkwFwYDVQQKDBByaW90cGlhby5ob21lbGFiMB4XDTI2MDgxMjAy
|
|
NDQ0NloXDTM2MDgwOTAyNDQ0NlowMDETMBEGA1UEAwwKaG9tZWxhYi1jYTEZMBcG
|
|
A1UECgwQcmlvdHBpYW8uaG9tZWxhYjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
|
|
AgoCggIBAJHgqiAV49ZPDxuAzLs9gcKfUlcVkD7rWaHUFVG95nvbJ8FOXh6tVwha
|
|
TN1scv/AeIAtTEmBgnP5Tcn+PpbsLRAVUjPqBc89jZnNNHBfpGiX5MgKdlQKgxI/
|
|
SDx3sUbk4KfFU6WPv6b8pV2sAhs4a+kztt9UJYRTsCnVHNImuyOCJxEiiT1bm8Xw
|
|
vrJqpaYOJ2eNarfZXIxCypseejbD10khUwsTMk0KIA+ygG0yIOi5H9MOcCgDfd9h
|
|
uTNKCBexiUZuI6PdG7Vf2p+t+OKciKGS+3kHsoc1pU95sFtj+3uhPKmTRKQYHTY2
|
|
N80IbnUfv8bHRmeTrwDWWQTCLkhceYw23V/uxTczRlD6k1Z8c7y60wSsOFlWpWjA
|
|
zQmzF5Ci87I/gzoSOYhOhzE4xZ6r3+xyt9X33xxDnWh7w/otM3CGw33YwzmH5HZm
|
|
j6/m521ts2PrUhbZ1lTJ+H8GSNVfpQzZ8VbO6WlWC5vohVBTub+q3a0BKYL0bHWG
|
|
26NmHlxWLwGGaBA88KOLaaA+bQPA+8A46hUFJrpuejrWla/Pb9RVxphH97SYW3Jn
|
|
lzpvs5tbtPGV49UdPjVypE/abaRPQfq0b9mfmBSoedEGRiFmrNq7Kknzj35nWM3z
|
|
YFdjJ0zpMKrVgo/om0FpcAsndVzyaewwQsZCHiN9eIgRoJVLrc3TAgMBAAEwDQYJ
|
|
KoZIhvcNAQELBQADggIBACM5Tej+FUpluKvWWa7dBrlBcnjp2hRJX7Iu/vBoH/br
|
|
dh1Rm7n/JmXw5foWHAH/6Ijv2LlZeY7hiHeST0MNfqWuMPGII/QCqwIGat+A/p1T
|
|
ELOPeQPsyaDuZ5kbfxYrXQNamSPAPW+bsd4U14HbXpr+u3vhPLPuZ0Ptpy6w9PqY
|
|
Rgv6IHcdJJNGkBsNeTDjGwyyd6IsmeH/OkEjHEKBe/e9KDpYFdr7pHRU/8RYxwy7
|
|
R3LF1J3f+9k4uwbP4A232AsIDJLKGnYwGiA9lhkbQ6pbl0CQawkfyUrAyRIG12uT
|
|
TGUk2gh6jNmR31EA5cPd6iHIaiMNsFxoHzGtCoO2xt8DYZzJC5WzNYYjlhXaFz23
|
|
QPPueCUMsXZNB91UzV1llR+uGJMePqm7jIyeUxlKCOlwG0IZqE3wkZ43WV82iZuG
|
|
ybRbwyVSKTlY6gp6d2K/FYrIkc7gwb3Dp6N1xPUTjPetIQgBLJ7DqMS65HhM3lOU
|
|
PN5PgewgyWq7w2/M8PN9gmIBhToqKgQ+5ZjSGEx9LiSdK2edXko+Nmoqs+9jpxBj
|
|
G/s9mcdhNcf2zc4t38vF+YkWMJYDxUwZU3+CoO7IcdJar7WL6puJSjt47iimj69w
|
|
RMUbo95shNurlEB4i8T6SHexnc3IW6t2YBz0GZNLgmdZobQKhszuh4fWR3wCO9/T
|
|
-----END CERTIFICATE-----
|
|
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: homelab-ca
|
|
namespace: monitoring
|
|
data:
|
|
ca.crt: |
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIE3DCCAsQCCQDSaKg3Y7DQkzANBgkqhkiG9w0BAQsFADAwMRMwEQYDVQQDDApo
|
|
b21lbGFiLWNhMRkwFwYDVQQKDBByaW90cGlhby5ob21lbGFiMB4XDTI2MDgxMjAy
|
|
NDQ0NloXDTM2MDgwOTAyNDQ0NlowMDETMBEGA1UEAwwKaG9tZWxhYi1jYTEZMBcG
|
|
A1UECgwQcmlvdHBpYW8uaG9tZWxhYjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
|
|
AgoCggIBAJHgqiAV49ZPDxuAzLs9gcKfUlcVkD7rWaHUFVG95nvbJ8FOXh6tVwha
|
|
TN1scv/AeIAtTEmBgnP5Tcn+PpbsLRAVUjPqBc89jZnNNHBfpGiX5MgKdlQKgxI/
|
|
SDx3sUbk4KfFU6WPv6b8pV2sAhs4a+kztt9UJYRTsCnVHNImuyOCJxEiiT1bm8Xw
|
|
vrJqpaYOJ2eNarfZXIxCypseejbD10khUwsTMk0KIA+ygG0yIOi5H9MOcCgDfd9h
|
|
uTNKCBexiUZuI6PdG7Vf2p+t+OKciKGS+3kHsoc1pU95sFtj+3uhPKmTRKQYHTY2
|
|
N80IbnUfv8bHRmeTrwDWWQTCLkhceYw23V/uxTczRlD6k1Z8c7y60wSsOFlWpWjA
|
|
zQmzF5Ci87I/gzoSOYhOhzE4xZ6r3+xyt9X33xxDnWh7w/otM3CGw33YwzmH5HZm
|
|
j6/m521ts2PrUhbZ1lTJ+H8GSNVfpQzZ8VbO6WlWC5vohVBTub+q3a0BKYL0bHWG
|
|
26NmHlxWLwGGaBA88KOLaaA+bQPA+8A46hUFJrpuejrWla/Pb9RVxphH97SYW3Jn
|
|
lzpvs5tbtPGV49UdPjVypE/abaRPQfq0b9mfmBSoedEGRiFmrNq7Kknzj35nWM3z
|
|
YFdjJ0zpMKrVgo/om0FpcAsndVzyaewwQsZCHiN9eIgRoJVLrc3TAgMBAAEwDQYJ
|
|
KoZIhvcNAQELBQADggIBACM5Tej+FUpluKvWWa7dBrlBcnjp2hRJX7Iu/vBoH/br
|
|
dh1Rm7n/JmXw5foWHAH/6Ijv2LlZeY7hiHeST0MNfqWuMPGII/QCqwIGat+A/p1T
|
|
ELOPeQPsyaDuZ5kbfxYrXQNamSPAPW+bsd4U14HbXpr+u3vhPLPuZ0Ptpy6w9PqY
|
|
Rgv6IHcdJJNGkBsNeTDjGwyyd6IsmeH/OkEjHEKBe/e9KDpYFdr7pHRU/8RYxwy7
|
|
R3LF1J3f+9k4uwbP4A232AsIDJLKGnYwGiA9lhkbQ6pbl0CQawkfyUrAyRIG12uT
|
|
TGUk2gh6jNmR31EA5cPd6iHIaiMNsFxoHzGtCoO2xt8DYZzJC5WzNYYjlhXaFz23
|
|
QPPueCUMsXZNB91UzV1llR+uGJMePqm7jIyeUxlKCOlwG0IZqE3wkZ43WV82iZuG
|
|
ybRbwyVSKTlY6gp6d2K/FYrIkc7gwb3Dp6N1xPUTjPetIQgBLJ7DqMS65HhM3lOU
|
|
PN5PgewgyWq7w2/M8PN9gmIBhToqKgQ+5ZjSGEx9LiSdK2edXko+Nmoqs+9jpxBj
|
|
G/s9mcdhNcf2zc4t38vF+YkWMJYDxUwZU3+CoO7IcdJar7WL6puJSjt47iimj69w
|
|
RMUbo95shNurlEB4i8T6SHexnc3IW6t2YBz0GZNLgmdZobQKhszuh4fWR3wCO9/T
|
|
-----END CERTIFICATE-----
|
|
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: homelab-ca
|
|
namespace: sqs
|
|
data:
|
|
ca.crt: |
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIE3DCCAsQCCQDSaKg3Y7DQkzANBgkqhkiG9w0BAQsFADAwMRMwEQYDVQQDDApo
|
|
b21lbGFiLWNhMRkwFwYDVQQKDBByaW90cGlhby5ob21lbGFiMB4XDTI2MDgxMjAy
|
|
NDQ0NloXDTM2MDgwOTAyNDQ0NlowMDETMBEGA1UEAwwKaG9tZWxhYi1jYTEZMBcG
|
|
A1UECgwQcmlvdHBpYW8uaG9tZWxhYjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
|
|
AgoCggIBAJHgqiAV49ZPDxuAzLs9gcKfUlcVkD7rWaHUFVG95nvbJ8FOXh6tVwha
|
|
TN1scv/AeIAtTEmBgnP5Tcn+PpbsLRAVUjPqBc89jZnNNHBfpGiX5MgKdlQKgxI/
|
|
SDx3sUbk4KfFU6WPv6b8pV2sAhs4a+kztt9UJYRTsCnVHNImuyOCJxEiiT1bm8Xw
|
|
vrJqpaYOJ2eNarfZXIxCypseejbD10khUwsTMk0KIA+ygG0yIOi5H9MOcCgDfd9h
|
|
uTNKCBexiUZuI6PdG7Vf2p+t+OKciKGS+3kHsoc1pU95sFtj+3uhPKmTRKQYHTY2
|
|
N80IbnUfv8bHRmeTrwDWWQTCLkhceYw23V/uxTczRlD6k1Z8c7y60wSsOFlWpWjA
|
|
zQmzF5Ci87I/gzoSOYhOhzE4xZ6r3+xyt9X33xxDnWh7w/otM3CGw33YwzmH5HZm
|
|
j6/m521ts2PrUhbZ1lTJ+H8GSNVfpQzZ8VbO6WlWC5vohVBTub+q3a0BKYL0bHWG
|
|
26NmHlxWLwGGaBA88KOLaaA+bQPA+8A46hUFJrpuejrWla/Pb9RVxphH97SYW3Jn
|
|
lzpvs5tbtPGV49UdPjVypE/abaRPQfq0b9mfmBSoedEGRiFmrNq7Kknzj35nWM3z
|
|
YFdjJ0zpMKrVgo/om0FpcAsndVzyaewwQsZCHiN9eIgRoJVLrc3TAgMBAAEwDQYJ
|
|
KoZIhvcNAQELBQADggIBACM5Tej+FUpluKvWWa7dBrlBcnjp2hRJX7Iu/vBoH/br
|
|
dh1Rm7n/JmXw5foWHAH/6Ijv2LlZeY7hiHeST0MNfqWuMPGII/QCqwIGat+A/p1T
|
|
ELOPeQPsyaDuZ5kbfxYrXQNamSPAPW+bsd4U14HbXpr+u3vhPLPuZ0Ptpy6w9PqY
|
|
Rgv6IHcdJJNGkBsNeTDjGwyyd6IsmeH/OkEjHEKBe/e9KDpYFdr7pHRU/8RYxwy7
|
|
R3LF1J3f+9k4uwbP4A232AsIDJLKGnYwGiA9lhkbQ6pbl0CQawkfyUrAyRIG12uT
|
|
TGUk2gh6jNmR31EA5cPd6iHIaiMNsFxoHzGtCoO2xt8DYZzJC5WzNYYjlhXaFz23
|
|
QPPueCUMsXZNB91UzV1llR+uGJMePqm7jIyeUxlKCOlwG0IZqE3wkZ43WV82iZuG
|
|
ybRbwyVSKTlY6gp6d2K/FYrIkc7gwb3Dp6N1xPUTjPetIQgBLJ7DqMS65HhM3lOU
|
|
PN5PgewgyWq7w2/M8PN9gmIBhToqKgQ+5ZjSGEx9LiSdK2edXko+Nmoqs+9jpxBj
|
|
G/s9mcdhNcf2zc4t38vF+YkWMJYDxUwZU3+CoO7IcdJar7WL6puJSjt47iimj69w
|
|
RMUbo95shNurlEB4i8T6SHexnc3IW6t2YBz0GZNLgmdZobQKhszuh4fWR3wCO9/T
|
|
-----END CERTIFICATE-----
|