change ip address

kubernetes/apps/network/cloudflared/app/secret.sops.yaml

@@ -3,8 +3,8 @@ kind: Secret
 metadata:
     name: cloudflared-secret
 stringData:
-    TUNNEL_ID: ENC[AES256_GCM,data:hVcyjU5qv4rRr+wpFPNw6a4qbGu1Bjs++NJyZpZuGz/Ua3i2,iv:p99TucIkkZtROMuo1co/gPoa84Pr7hp4dHsh4PGAIgs=,tag:hdk2XodyoZ3m8K7HpR66iQ==,type:str]
-    credentials.json: ENC[AES256_GCM,data:4djf9wd4+PAgXU6fLzfXcJe8r0NjvlJTYlqnvO/h42ni9Uvn8IwRg2U8b84pBndcHcJzDyuPtrE4rhuNLNspG4Kirq92z7eADG+hx0Es//esdytfg0SN7e5jHUScNqjerJ+kflqSOOalEGD3ThcDcmHr204/lns08o6yGKLel/p3NncFLz1JBw2sloEskzlfFqwQefEABakYDCUzUGyA+sFWg4wUhwyFer3rRGSKuQ==,iv:aW4zMYyDEtys5gAQMZiW2a+0aSWcFqGnN0FD87gYqDQ=,tag:RpCmzjAkubFJkcSMeCZIxw==,type:str]
+    TUNNEL_ID: ENC[AES256_GCM,data:hIUwSNz7oqCh8PT+vXwwx1I4V6c0e2YsPw66RII9aq6AMq0N,iv:cA0JmRQ81q4hMh8YCXLqHoXybDshJlfde+9P7GpcLpY=,tag:2+u80sORnuqH2sj72UKnUw==,type:str]
+    credentials.json: ENC[AES256_GCM,data:sDrvf6AbUYru40kCxTUZi4RiNck0dfr9G2gzX0uQ0pklgn7Q3NTVFcFG5xC4r9zbxkhDgXFAtUEPRgeOVmuFm/g6tjpjrUtm7Qn8jjHjeO5GPTuDpSz+zYLP76sKh/5kasDBhUMF/xu3tMyAKn0C3KpWxqy4rCfPuxnvQEqhg86fjMCovl7nrxbHYNI2QX6degwUeuBdqsYaAc7iEP3uxlhuxEkJrkxHiyeDgHROVw==,iv:FYatTUgyNH42cNW+pDUNptDHk50ozmvIU3kwIhYOBeE=,tag:RV513CCOQCsfWMcVklr0bw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -14,14 +14,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1MVk0dUIrK0wvRjVBRHBu
-            L0p6cnc3RHFhcS80N2ZLMExjclRFQjVxdVNrCnFlUFQwTGdNdnBaendCTTdObWpm
-            djdoTHhhWU55TWFWNUhUY0xqc2lUMEUKLS0tIGNVeEY2aXgyMlQ2TlJjcFZ5VzI5
-            cnFTSjBVSkxyMVJTNk5DbWZIVXVCakEKedOzjsIKE16Mlu19eHXD3XnhQ9CCRWzn
-            cKfMu/+yFB1r4LBBSMt1Bj2RLqE88sDShsKnw5RjYRng/bLjsa3h1Q==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjNkplUjFvY3EreWY4MU45
+            VVI0a3NuMk9FNXM0Z0p5aFNBN0M3b0tWVTFZCkJOUDlpcjN0aE1uT3VYV2lBaGwy
+            Z3gzZTloclNoMHFESnFDdDU2dGhlUUkKLS0tICtseXZrSno5Q1NlTDA3Y0ZQTFlM
+            enB5SGd3RlZ6VHJwR1VCOGhNalZRNWMKuq6E5BgJiqGzcqZOsMpniIU7s4uukFmu
+            twCOXA5mYfP/a45YecGSGTTCABqQVIvAhfqTAVJZ4RxJBazgtAmNpw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-03T02:08:42Z"
-    mac: ENC[AES256_GCM,data:S5KyIW9ohTxnv5BwKXwugKBhYd0ffPEd4p9m2iIXPdKPyYEhsJG7LtanRlkTXbSBTol5gwRs7LjiH5aRYmVESrAg6StVt4yKdP8woAOGT+7m/a12PCzNjIo2Hvlbg8Weq6Ld4KdrLGFOGe7AWnumgAb+pHCWq3ViBBWyQz4si0w=,iv:6a6b+D0/pC1tdS8ZDDYzIgzX6IQ9a9v+vB/fFmYK8MQ=,tag:BluW/+088Sy1ag3L6W+T1Q==,type:str]
+    lastmodified: "2024-11-05T22:49:52Z"
+    mac: ENC[AES256_GCM,data:jCYplW3rXBm503VqXQwFwFBHKirGH2dyUzbqkjfiMikr6pfBO7/GAIFl7SdxoejyfKf1FNcf1laYMe5Ti6Y2F9HFs9923lhU7udsjE4PZT4zkDXRj4QMTI9zwncVqUFwxVtdFX9mrKvFC88axwZTShuFkW3dZYP30NY79BGGGI0=,iv:pKuq/uzGFM+jr9Q+z/rYcQmsL/FvVTcW+fwKnWuJ78g=,tag:SquOe0pCOeojj6c5QEgURw==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1

kubernetes/apps/network/external-dns/app/secret.sops.yaml

@@ -3,7 +3,7 @@ kind: Secret
 metadata:
     name: external-dns-secret
 stringData:
-    api-token: ENC[AES256_GCM,data:7VqySY0j3D4DJVc1QZewOf6dJ03HZ1GmCRYE+gUPsXJAF5kI3MnqFg==,iv:RA8VOyOIOqnrgA2YfK9m7Bhvnun/sg1vLX1a/xZKM/4=,tag:/vBXVQh706qHPBAS+He8Lw==,type:str]
+    api-token: ENC[AES256_GCM,data:+6qCn2SEjn9AnVjxN0Nj1LO4afxFFz5jXjlAU3yMmNIpBv+S13HmKA==,iv:vhWVPtLieQGc3DffK2HStABtHUVCjUyuKmmGNREjhf8=,tag:JTRoKRBd8sUoHjhF8inEgw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -13,14 +13,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjQ0RnR2VEMlg0S01CK3Vp
-            MWtBZUpJV2FYUDIvR0JqMXpEd1lyNFBvQnowCk9NaU9tanJNTk1VNHVTemlDMzNP
-            NXNVeEV3Q1BiNWtHZmM1SUVyTkN6N28KLS0tIGNRdEdZZjZIeFZBRlNDOXk3RS95
-            ZTk2UHhnRmZKT1phajkzckdkWUtDeVUKmCe5EE4jLtgLZo9TqeOcuYAaxqVdRpUO
-            jfGp+BgsdOyr588yj4zQcI4AumeNJcWgP19XjLtwT93825yK0EYpwA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2RVBXaFlxNkNMV1UvYlVH
+            YjFCZmpzSDg1QkJwK3lqQkthRU1uc0dKanlRClBUakJCZHdmWnJVWlpQMHkwOW1m
+            dnF4YVRpVjdjZ0ZPWm5abGljQ0syTm8KLS0tIEdiKzB1YUdmRjJSYzI3ZTM1QjVJ
+            QStzNmRMT1NzTnRjQkdjd2J3K1AxcDgKXMwhHXvHRubLM8AxIIuy1ssfAZPOanle
+            4IG3rep+QFytiZXDOeTp0KgJ1eHdQY7ECbk8Opzp58PWjK9C9GLQjw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-03T02:08:42Z"
-    mac: ENC[AES256_GCM,data:RoR1gTYJSVW/3/2yyqOIjkaW4VIz4jFef4qIroGMnxptJ2Y7uO9ZkZXsK7o9fZ7Ea7+sOsXzJpzEERya86NH+PC8ppeK3G4uEAEvcfqQJrfSRrGiKGS/W7hiLbR8LbhkqttnA2NMf7UF2dBmGwXljEUYqF5tOGiFNjXAJx0uueo=,iv:vap9jYFu5qYLQQcy5qwCFIda8F0KViSoF4Y1iL4Nlw8=,tag:SLp/h+0iIK3otyNs/VKh0Q==,type:str]
+    lastmodified: "2024-11-05T22:49:52Z"
+    mac: ENC[AES256_GCM,data:kOG/PHWWKHfUSHS+F4+DQa6zBTKTkFBMD9dP2BZaLsoSe6Pq1CQwAA2ipmVNwJ0L0clSeK6GBCC9OX6q5ZwxKoRlRgFzP7+QFc2Aow+71kY2PDgtPpiVHmwdO3gySugCoQXXs9MctC7BUEhEBSfPJy2OVUfjXXlC0I4kgGjIqTQ=,iv:ecD/5D4uoLeTsb6ilU5CzYhjV0hfMwWw7vsZF5wnxPw=,tag:oulQGN04d4X1b4zOIxaOiw==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1

kubernetes/apps/network/ingress-nginx/certificates/kustomization.yaml

@@ -2,4 +2,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - ./production.yaml
+  - ./staging.yaml

kubernetes/apps/network/ingress-nginx/external/helmrelease.yaml

@@ -29,7 +29,7 @@ spec:
       service:
         annotations:
           external-dns.alpha.kubernetes.io/hostname: "external.${SECRET_DOMAIN}"
-          lbipam.cilium.io/ips: "10.0.10.3"
+          lbipam.cilium.io/ips: "172.16.10.2"
         externalTrafficPolicy: Cluster
       ingressClassResource:
         name: external

kubernetes/apps/network/ingress-nginx/internal/helmrelease.yaml

@@ -26,7 +26,7 @@ spec:
     controller:
       service:
         annotations:
-          lbipam.cilium.io/ips: "10.0.10.4"
+          lbipam.cilium.io/ips: "172.16.10.2"
         externalTrafficPolicy: Cluster
       ingressClassResource:
         name: internal

kubernetes/apps/network/k8s-gateway/app/helmrelease.yaml

@@ -28,6 +28,6 @@ spec:
       type: LoadBalancer
       port: 53
       annotations:
-        lbipam.cilium.io/ips: "10.0.10.2"
+        lbipam.cilium.io/ips: "172.16.10.3"
       externalTrafficPolicy: Cluster
     watchedResources: ["Ingress", "Service"]