change ip address

kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml

@@ -3,7 +3,7 @@ kind: Secret
 metadata:
     name: cert-manager-secret
 stringData:
-    api-token: ENC[AES256_GCM,data:05snmnRqRvtC5YaE4jf153hNcetC5mB5YgY9l4ddqM2CDIN7ks5lPA==,iv:zUYbSIMB3kGzlliEaIjDoPQ4Wo/VtpCVdG1hyRoJCCk=,tag:uKU1K7vEEHiPfKMArcJ5pQ==,type:str]
+    api-token: ENC[AES256_GCM,data:NjB5c5+v7f+Azqh9TDW+6yovfmwhhcGsTwuXbUxTS4aqWw1mGJsRVA==,iv:VCPzbi36OOVDpnypPC5cA/Miq6ds/3xC/1tHQzcOmTI=,tag:NpC3PyQEMrle5ezlctkPLw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -13,14 +13,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhN1crOEE0SERyQ0hKZ2ZK
-            U0QvSnhvOW5ZY0tUZ2pabGVxVnl5eVdHU2lFCjVITXdaWFZZSWRZRVovZllPb2RB
-            em8zQ3ZNMWhCNzNvTk1hSkRKaDZmK0kKLS0tIGgxQ3hVN1lyaVFZYjM4aUdoZW0v
-            Q2lTeXhqL1VweXBFZXVmN1pGN3Z6azAKlEZDTkMXPJVNJP5TnBPamrBLDaUGPsHN
-            xjQozkIkYTGCVMkRCt+sLyVqq9wb8qBh7hYTQYClHN1yuIujxWtXgQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1Sld4dVpiMEhlZTg1NTlP
+            cmpHcGdJb243NUY3czRMNEpEcytsVkErV0RJCmZpc1hZTW5PMitnUTh5emRGOWFB
+            MVNFN1VFY2ZZelpZazM2M0VrdVIzVzAKLS0tIG9rWGVxQk9TTlNZdzZvSnRiT1Vn
+            MktudEZWa1dkK1BoNTU2SWhYUDl5QU0Kw5+AMAb8a4kXh6mM0E8tlKGEvTJSqNzR
+            HEaqtnx3rAwXYkS5zBbC6oNFaL96hifvGtS5XIl5+0lf2DZYl/quKg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-03T02:08:43Z"
-    mac: ENC[AES256_GCM,data:8hdtfW8yTStpUjjPUk2bMeoljEFmAX9vl0ErOjLc9C2fQqOCMd97GTOHUV87Oh+Zt83cVTV8IniP9oJ4qcDnipXFWZ5km4ok1q76pjyhWZn84tCNdgTU8qxYCpT4WS7SwEZ8WnH3Bio4KRgGqUdBK/THjiqL66JPf4ehmofPHfo=,iv:Lf9VtGiiRhJf5WlyPOk1ykOEVE9rdnq6VDA/linOgok=,tag:wAWNzD1eyvJk1QosQLUUUw==,type:str]
+    lastmodified: "2024-11-05T22:49:52Z"
+    mac: ENC[AES256_GCM,data:CvaW4MrwoCDZVs34fmi3sOOfLf36M49EJCYWRYWsnp3V2jXYB6rUempcg7a+hXblUKcBgll6Lz5872gGKYln0vm9TPDdrwyysLK+bqgLi4cTsPkc84xiNbCBDFBe67UDw1AQzgibSMNB/uUlg6MNIWXcU+jrRoKB1NgRCg6Gqng=,iv:wEu7itx2aGBBzaja7n75KnhG6KANdfO2S9W+WiXPgB4=,tag:gqOfa1tfNO0wABIus+x+Lg==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1

kubernetes/apps/flux-system/webhooks/app/github/secret.sops.yaml

@@ -3,7 +3,7 @@ kind: Secret
 metadata:
     name: github-webhook-token-secret
 stringData:
-    token: ENC[AES256_GCM,data:mzN4IYbj/ATbG6lBRl3lTyOXnAgdD0FxiGqLinLWLvc=,iv:6NEwZgxUsDdCydMZJO2PbISJGuDNdaNqqtpeWxlgxHc=,tag:aoXFYd4CbYRKgHuAHvvR8A==,type:str]
+    token: ENC[AES256_GCM,data:xeFck6Jytf5bo+sLAef1B8etWvJcCggRnCprHbb+f/0=,iv:NMHvrAtUI3rX6xjP3MU5z/qKF6xY4Dfawpfm7zN7b4g=,tag:o+OG6fVsL8xUmOiXU4nTag==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -13,14 +13,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLT1NZbGNiOFpEVWFCUUEx
-            MklXRms0SW55cWxOOTZhTXdLQmVDT2d2OUQ0ClF1dUcvTkp0UDhwZk9sSGZ5VEQ1
-            OGhFUkpjTVhlZHVxMlliNXlhZVFGUm8KLS0tIE5ncUtsY3RkNGU3clZFZExJbFJO
-            ZzY4MHYzZUtZNmovRWN2MnlmdHNqelkKGT0pd4mC1xouIiHLvz3hdluL3IHxEVLt
-            O28piJ3pWudBjlWybrvIE9zLEptIYaLeDSFZT8Mtn/78k49WgeSnsA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhUTU1MXd2dmtoSTk3Z0Vh
+            NkgwS2hrdHRsUG1QNzJIZTVQcE9pTlVXeTFRCnNwWFllVzI1dmc4RWJLSlAyVkxS
+            R2R0MHNWY2hpNnNFc0lINC9zK2FTOTQKLS0tIHE2V2loOUN4R1pIMU5PRnhTL2RW
+            UjFQTTdaY0h3MWlxSHdpWmtuaDJPU1kKWukd3CrDp+yVk07zomqlwzbsS7g+6STL
+            F27kSioNUFTHt8HQqckUG7+XT4nvw59vcNu6Revt71vsxji8CWgXnw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-03T02:08:42Z"
-    mac: ENC[AES256_GCM,data:6AvfwWh5WDZOo7Tw2hwEe7+38ENciuuiS+cCzhWKI65+TawpUTC6DNwdFEOsH7Df+6QD3SYs+SvS3x36NRcXaLDwpbAg2Sk63gO/8Kj8kwGqxh+YjWz/8Zag2QNfM+33RCcHCzsvkombGxhVhoamR0oI5zPfjnruCdIq2Q3BBtg=,iv:cMOz++QYxm38f54kW3gOKTNWrpVp0+Q2aqEGyk+eimo=,tag:LfkJCw2sjikb86Yh0cPWVg==,type:str]
+    lastmodified: "2024-11-05T22:49:52Z"
+    mac: ENC[AES256_GCM,data:8fzSFjjrJoiC3jxfhfNLXWqohnAp93ursihOg5AzjUAs3OcGiqS6WIsN48Sy2Q0XZPCbfbq3BMkRggjF8fD+4ulR8a50fUJy7Lan5Q9ZMAe/P4ZH3N7VhwpLWq/LiGdjX/uF19PcJBtqTAGIWBN9JHHYYQIlSx93pPtvXENqDuE=,iv:/5ZbH4W4HkMKGN+iBgxeW5JTUdzD1xlDBPSrgoCkbHQ=,tag:by1L4kzJvJ6mL6ABhvGUiw==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1

kubernetes/apps/network/cloudflared/app/secret.sops.yaml

@@ -3,8 +3,8 @@ kind: Secret
 metadata:
     name: cloudflared-secret
 stringData:
-    TUNNEL_ID: ENC[AES256_GCM,data:hVcyjU5qv4rRr+wpFPNw6a4qbGu1Bjs++NJyZpZuGz/Ua3i2,iv:p99TucIkkZtROMuo1co/gPoa84Pr7hp4dHsh4PGAIgs=,tag:hdk2XodyoZ3m8K7HpR66iQ==,type:str]
-    credentials.json: ENC[AES256_GCM,data:4djf9wd4+PAgXU6fLzfXcJe8r0NjvlJTYlqnvO/h42ni9Uvn8IwRg2U8b84pBndcHcJzDyuPtrE4rhuNLNspG4Kirq92z7eADG+hx0Es//esdytfg0SN7e5jHUScNqjerJ+kflqSOOalEGD3ThcDcmHr204/lns08o6yGKLel/p3NncFLz1JBw2sloEskzlfFqwQefEABakYDCUzUGyA+sFWg4wUhwyFer3rRGSKuQ==,iv:aW4zMYyDEtys5gAQMZiW2a+0aSWcFqGnN0FD87gYqDQ=,tag:RpCmzjAkubFJkcSMeCZIxw==,type:str]
+    TUNNEL_ID: ENC[AES256_GCM,data:hIUwSNz7oqCh8PT+vXwwx1I4V6c0e2YsPw66RII9aq6AMq0N,iv:cA0JmRQ81q4hMh8YCXLqHoXybDshJlfde+9P7GpcLpY=,tag:2+u80sORnuqH2sj72UKnUw==,type:str]
+    credentials.json: ENC[AES256_GCM,data:sDrvf6AbUYru40kCxTUZi4RiNck0dfr9G2gzX0uQ0pklgn7Q3NTVFcFG5xC4r9zbxkhDgXFAtUEPRgeOVmuFm/g6tjpjrUtm7Qn8jjHjeO5GPTuDpSz+zYLP76sKh/5kasDBhUMF/xu3tMyAKn0C3KpWxqy4rCfPuxnvQEqhg86fjMCovl7nrxbHYNI2QX6degwUeuBdqsYaAc7iEP3uxlhuxEkJrkxHiyeDgHROVw==,iv:FYatTUgyNH42cNW+pDUNptDHk50ozmvIU3kwIhYOBeE=,tag:RV513CCOQCsfWMcVklr0bw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -14,14 +14,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1MVk0dUIrK0wvRjVBRHBu
-            L0p6cnc3RHFhcS80N2ZLMExjclRFQjVxdVNrCnFlUFQwTGdNdnBaendCTTdObWpm
-            djdoTHhhWU55TWFWNUhUY0xqc2lUMEUKLS0tIGNVeEY2aXgyMlQ2TlJjcFZ5VzI5
-            cnFTSjBVSkxyMVJTNk5DbWZIVXVCakEKedOzjsIKE16Mlu19eHXD3XnhQ9CCRWzn
-            cKfMu/+yFB1r4LBBSMt1Bj2RLqE88sDShsKnw5RjYRng/bLjsa3h1Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjNkplUjFvY3EreWY4MU45
+            VVI0a3NuMk9FNXM0Z0p5aFNBN0M3b0tWVTFZCkJOUDlpcjN0aE1uT3VYV2lBaGwy
+            Z3gzZTloclNoMHFESnFDdDU2dGhlUUkKLS0tICtseXZrSno5Q1NlTDA3Y0ZQTFlM
+            enB5SGd3RlZ6VHJwR1VCOGhNalZRNWMKuq6E5BgJiqGzcqZOsMpniIU7s4uukFmu
+            twCOXA5mYfP/a45YecGSGTTCABqQVIvAhfqTAVJZ4RxJBazgtAmNpw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-03T02:08:42Z"
-    mac: ENC[AES256_GCM,data:S5KyIW9ohTxnv5BwKXwugKBhYd0ffPEd4p9m2iIXPdKPyYEhsJG7LtanRlkTXbSBTol5gwRs7LjiH5aRYmVESrAg6StVt4yKdP8woAOGT+7m/a12PCzNjIo2Hvlbg8Weq6Ld4KdrLGFOGe7AWnumgAb+pHCWq3ViBBWyQz4si0w=,iv:6a6b+D0/pC1tdS8ZDDYzIgzX6IQ9a9v+vB/fFmYK8MQ=,tag:BluW/+088Sy1ag3L6W+T1Q==,type:str]
+    lastmodified: "2024-11-05T22:49:52Z"
+    mac: ENC[AES256_GCM,data:jCYplW3rXBm503VqXQwFwFBHKirGH2dyUzbqkjfiMikr6pfBO7/GAIFl7SdxoejyfKf1FNcf1laYMe5Ti6Y2F9HFs9923lhU7udsjE4PZT4zkDXRj4QMTI9zwncVqUFwxVtdFX9mrKvFC88axwZTShuFkW3dZYP30NY79BGGGI0=,iv:pKuq/uzGFM+jr9Q+z/rYcQmsL/FvVTcW+fwKnWuJ78g=,tag:SquOe0pCOeojj6c5QEgURw==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1

kubernetes/apps/network/external-dns/app/secret.sops.yaml

@@ -3,7 +3,7 @@ kind: Secret
 metadata:
     name: external-dns-secret
 stringData:
-    api-token: ENC[AES256_GCM,data:7VqySY0j3D4DJVc1QZewOf6dJ03HZ1GmCRYE+gUPsXJAF5kI3MnqFg==,iv:RA8VOyOIOqnrgA2YfK9m7Bhvnun/sg1vLX1a/xZKM/4=,tag:/vBXVQh706qHPBAS+He8Lw==,type:str]
+    api-token: ENC[AES256_GCM,data:+6qCn2SEjn9AnVjxN0Nj1LO4afxFFz5jXjlAU3yMmNIpBv+S13HmKA==,iv:vhWVPtLieQGc3DffK2HStABtHUVCjUyuKmmGNREjhf8=,tag:JTRoKRBd8sUoHjhF8inEgw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -13,14 +13,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjQ0RnR2VEMlg0S01CK3Vp
-            MWtBZUpJV2FYUDIvR0JqMXpEd1lyNFBvQnowCk9NaU9tanJNTk1VNHVTemlDMzNP
-            NXNVeEV3Q1BiNWtHZmM1SUVyTkN6N28KLS0tIGNRdEdZZjZIeFZBRlNDOXk3RS95
-            ZTk2UHhnRmZKT1phajkzckdkWUtDeVUKmCe5EE4jLtgLZo9TqeOcuYAaxqVdRpUO
-            jfGp+BgsdOyr588yj4zQcI4AumeNJcWgP19XjLtwT93825yK0EYpwA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2RVBXaFlxNkNMV1UvYlVH
+            YjFCZmpzSDg1QkJwK3lqQkthRU1uc0dKanlRClBUakJCZHdmWnJVWlpQMHkwOW1m
+            dnF4YVRpVjdjZ0ZPWm5abGljQ0syTm8KLS0tIEdiKzB1YUdmRjJSYzI3ZTM1QjVJ
+            QStzNmRMT1NzTnRjQkdjd2J3K1AxcDgKXMwhHXvHRubLM8AxIIuy1ssfAZPOanle
+            4IG3rep+QFytiZXDOeTp0KgJ1eHdQY7ECbk8Opzp58PWjK9C9GLQjw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-03T02:08:42Z"
-    mac: ENC[AES256_GCM,data:RoR1gTYJSVW/3/2yyqOIjkaW4VIz4jFef4qIroGMnxptJ2Y7uO9ZkZXsK7o9fZ7Ea7+sOsXzJpzEERya86NH+PC8ppeK3G4uEAEvcfqQJrfSRrGiKGS/W7hiLbR8LbhkqttnA2NMf7UF2dBmGwXljEUYqF5tOGiFNjXAJx0uueo=,iv:vap9jYFu5qYLQQcy5qwCFIda8F0KViSoF4Y1iL4Nlw8=,tag:SLp/h+0iIK3otyNs/VKh0Q==,type:str]
+    lastmodified: "2024-11-05T22:49:52Z"
+    mac: ENC[AES256_GCM,data:kOG/PHWWKHfUSHS+F4+DQa6zBTKTkFBMD9dP2BZaLsoSe6Pq1CQwAA2ipmVNwJ0L0clSeK6GBCC9OX6q5ZwxKoRlRgFzP7+QFc2Aow+71kY2PDgtPpiVHmwdO3gySugCoQXXs9MctC7BUEhEBSfPJy2OVUfjXXlC0I4kgGjIqTQ=,iv:ecD/5D4uoLeTsb6ilU5CzYhjV0hfMwWw7vsZF5wnxPw=,tag:oulQGN04d4X1b4zOIxaOiw==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1

kubernetes/apps/network/ingress-nginx/certificates/kustomization.yaml

@@ -2,4 +2,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - ./production.yaml
+  - ./staging.yaml

kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml

@@ -29,7 +29,7 @@ spec:
       service:
         annotations:
           external-dns.alpha.kubernetes.io/hostname: "external.${SECRET_DOMAIN}"
-          lbipam.cilium.io/ips: "10.0.10.3"
+          lbipam.cilium.io/ips: "172.16.10.2"
         externalTrafficPolicy: Cluster
       ingressClassResource:
         name: external

kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml

@@ -26,7 +26,7 @@ spec:
     controller:
       service:
         annotations:
-          lbipam.cilium.io/ips: "10.0.10.4"
+          lbipam.cilium.io/ips: "172.16.10.2"
         externalTrafficPolicy: Cluster
       ingressClassResource:
         name: internal

kubernetes/apps/network/k8s-gateway/app/helmrelease.yaml

@@ -28,6 +28,6 @@ spec:
       type: LoadBalancer
       port: 53
       annotations:
-        lbipam.cilium.io/ips: "10.0.10.2"
+        lbipam.cilium.io/ips: "172.16.10.3"
       externalTrafficPolicy: Cluster
     watchedResources: ["Ingress", "Service"]