production certs

kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml

@@ -3,7 +3,7 @@ kind: Secret
 metadata:
     name: cert-manager-secret
 stringData:
-    api-token: ENC[AES256_GCM,data:KBrN1Y5487qWd37hTfj82xcDINpq6uALSrqvFqL05w9MRG4lrSLqWw==,iv:+WjLThBNZJtrCM1YL3JxMf/8WpVqWNCBXFdrhE54YGk=,tag:kMaDKtFo8yyJWpNvyzFHNA==,type:str]
+    api-token: ENC[AES256_GCM,data:05snmnRqRvtC5YaE4jf153hNcetC5mB5YgY9l4ddqM2CDIN7ks5lPA==,iv:zUYbSIMB3kGzlliEaIjDoPQ4Wo/VtpCVdG1hyRoJCCk=,tag:uKU1K7vEEHiPfKMArcJ5pQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -13,14 +13,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRazdpSnl4Qm1ybngzaVNI
-            OENDdTNZcnNaUUtNTENIWm1Pb2F5OXg4SVZVCno1MXFWZ0tCOGU1SzgweHA4SnFU
-            QUNHNWRGVDdsei9LZklZQjd3cTFLUkUKLS0tIGYyMmJ6a2d2QmVqUk1ycXBMZUpD
-            dEQxVkQ2RHhHdE83VW1vSm9FUHhPa28K0jI9FtSRtv20gTwlbVzwrnImPRRk53Tt
-            vEU0oTA5RzWK5epe08qXN+rCfU55xjQ3RVZDX1Q80I5y8TRmQOKHxg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhN1crOEE0SERyQ0hKZ2ZK
+            U0QvSnhvOW5ZY0tUZ2pabGVxVnl5eVdHU2lFCjVITXdaWFZZSWRZRVovZllPb2RB
+            em8zQ3ZNMWhCNzNvTk1hSkRKaDZmK0kKLS0tIGgxQ3hVN1lyaVFZYjM4aUdoZW0v
+            Q2lTeXhqL1VweXBFZXVmN1pGN3Z6azAKlEZDTkMXPJVNJP5TnBPamrBLDaUGPsHN
+            xjQozkIkYTGCVMkRCt+sLyVqq9wb8qBh7hYTQYClHN1yuIujxWtXgQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-03T01:55:32Z"
-    mac: ENC[AES256_GCM,data:YEO53Ml0bp7C5nyqX1+kRdxfwBz6H6AmIClAKy76mg8Ws+/0DcPGPUTtHsWF+V8XoVB6FqpwLcZblhgiJ6OkTfV0CO1BDJ//CxEbHJDSxEl4CH/TgnEzufLwM8yFn1VdtcFAKzWEGGGFbE551AH++ig2tKqwPwiJ5jdp6CPv/jc=,iv:thwNpm8vc1hHRwezGc6bApZH2edHj6gc5M5Ywm+p7gc=,tag:apX32TKtniu6d1GbnodL3A==,type:str]
+    lastmodified: "2024-11-03T02:08:43Z"
+    mac: ENC[AES256_GCM,data:8hdtfW8yTStpUjjPUk2bMeoljEFmAX9vl0ErOjLc9C2fQqOCMd97GTOHUV87Oh+Zt83cVTV8IniP9oJ4qcDnipXFWZ5km4ok1q76pjyhWZn84tCNdgTU8qxYCpT4WS7SwEZ8WnH3Bio4KRgGqUdBK/THjiqL66JPf4ehmofPHfo=,iv:Lf9VtGiiRhJf5WlyPOk1ykOEVE9rdnq6VDA/linOgok=,tag:wAWNzD1eyvJk1QosQLUUUw==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1

kubernetes/apps/flux-system/webhooks/app/github/secret.sops.yaml

@@ -3,7 +3,7 @@ kind: Secret
 metadata:
     name: github-webhook-token-secret
 stringData:
-    token: ENC[AES256_GCM,data:fOtwEg6E3uO11P/jSaS3lgRSgLPi2aMr1sR8F9RINOc=,iv:Z4t48mRbD2s0+nbWIwxwIpBDEsfuGlFVJJA84FE5esE=,tag:5iMWjTAIE0VWxGjSZPQpyA==,type:str]
+    token: ENC[AES256_GCM,data:mzN4IYbj/ATbG6lBRl3lTyOXnAgdD0FxiGqLinLWLvc=,iv:6NEwZgxUsDdCydMZJO2PbISJGuDNdaNqqtpeWxlgxHc=,tag:aoXFYd4CbYRKgHuAHvvR8A==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -13,14 +13,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRTm0zKzNqZGpaaThFcFFo
-            c2FVTk4rTVFFWm5IazVZM2U4NU1ackRzRlIwClNuWXlSYkp5RzFrTmozZHF1bkp6
-            YTQrN3JkZVVGOWZsdHprVUwvdHZGajQKLS0tIGFuaW14eVNlMjBqUURtcjl3QzVh
-            Qmo4UktUSzFodVM4QlNOREVHbUwvVzQKnWN2DbvTcyOUAaGLEmrIb2gNBaYqkfEz
-            RgqYF5wCS/vEpKfYokmr7xI1KIpj963V/LITbyTZut5dMSYfgI74Lw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBLT1NZbGNiOFpEVWFCUUEx
+            MklXRms0SW55cWxOOTZhTXdLQmVDT2d2OUQ0ClF1dUcvTkp0UDhwZk9sSGZ5VEQ1
+            OGhFUkpjTVhlZHVxMlliNXlhZVFGUm8KLS0tIE5ncUtsY3RkNGU3clZFZExJbFJO
+            ZzY4MHYzZUtZNmovRWN2MnlmdHNqelkKGT0pd4mC1xouIiHLvz3hdluL3IHxEVLt
+            O28piJ3pWudBjlWybrvIE9zLEptIYaLeDSFZT8Mtn/78k49WgeSnsA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-03T01:55:31Z"
-    mac: ENC[AES256_GCM,data:TCp2V+8+2B/F7sGJMdmJTBz4tZLez3wlxZ0I9SYYoxBWyMWijl80k5EbdSZf/9Imw1pO3KNw0fEvrfsIFM4QYc54ds6iAD0jD7vC27DvMoAfFfLUHKO5H9OAI3dK6c/sDQz3SMfFgSVYsarNN6K3Q56xKC+kuWONf4laK2EbQxQ=,iv:0z+dqe/+hD+30so0UoEhIH5YNc7BXdjqYTBS4ev/Ntk=,tag:Hq2+Dl56jHIN401RkAs9rw==,type:str]
+    lastmodified: "2024-11-03T02:08:42Z"
+    mac: ENC[AES256_GCM,data:6AvfwWh5WDZOo7Tw2hwEe7+38ENciuuiS+cCzhWKI65+TawpUTC6DNwdFEOsH7Df+6QD3SYs+SvS3x36NRcXaLDwpbAg2Sk63gO/8Kj8kwGqxh+YjWz/8Zag2QNfM+33RCcHCzsvkombGxhVhoamR0oI5zPfjnruCdIq2Q3BBtg=,iv:cMOz++QYxm38f54kW3gOKTNWrpVp0+Q2aqEGyk+eimo=,tag:LfkJCw2sjikb86Yh0cPWVg==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1

kubernetes/apps/network/cloudflared/app/secret.sops.yaml

@@ -3,8 +3,8 @@ kind: Secret
 metadata:
     name: cloudflared-secret
 stringData:
-    TUNNEL_ID: ENC[AES256_GCM,data:N2fIgdHZVQ1lAlnG5Ho1A3iJcVuo6G98I55T7cK3ppduGKKG,iv:zo7gRCMW/arLI2rYU3GANn+nZnWSghT0rm8DXu5zris=,tag:GexMRqnqYXLWYawCd/Xgkg==,type:str]
-    credentials.json: ENC[AES256_GCM,data:eBcYODhrMCOGwLwV3PLKljTLHWHuVM2Me/XyDw9D4Hd7w0JBCvZxMP1CAN7ZgyfpSRFE+oeMG2l05z+aS2e0XzOvGtS43fCSMXKiaWUQuXgCkndCezyhDRlD/EYZU2i3EjKzJP0fSEPdSi5zHpYgAKR4F1DcbtETQXkLM7QlpWxLww6jbI2xmhI+k6Bs7XnSzURyYubYEbP/Bqsx/NYrAFu2p1lKnhNFdqjU6Bqtvw==,iv:sx7FTHsSZBRV+QZRBy0DxTzjHAenns0zDvFI7NUmAoU=,tag:es2xQbKiWwdvnDLeSVNguQ==,type:str]
+    TUNNEL_ID: ENC[AES256_GCM,data:hVcyjU5qv4rRr+wpFPNw6a4qbGu1Bjs++NJyZpZuGz/Ua3i2,iv:p99TucIkkZtROMuo1co/gPoa84Pr7hp4dHsh4PGAIgs=,tag:hdk2XodyoZ3m8K7HpR66iQ==,type:str]
+    credentials.json: ENC[AES256_GCM,data:4djf9wd4+PAgXU6fLzfXcJe8r0NjvlJTYlqnvO/h42ni9Uvn8IwRg2U8b84pBndcHcJzDyuPtrE4rhuNLNspG4Kirq92z7eADG+hx0Es//esdytfg0SN7e5jHUScNqjerJ+kflqSOOalEGD3ThcDcmHr204/lns08o6yGKLel/p3NncFLz1JBw2sloEskzlfFqwQefEABakYDCUzUGyA+sFWg4wUhwyFer3rRGSKuQ==,iv:aW4zMYyDEtys5gAQMZiW2a+0aSWcFqGnN0FD87gYqDQ=,tag:RpCmzjAkubFJkcSMeCZIxw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -14,14 +14,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxZVEwYUZnQmlNUEdrRWZY
-            UDNzZXRWVDR0WDVDTnh4eXczUDFTS3EweFh3CkpIWUNpZnR6SDdrc0lBODhsYTh2
-            WWpXUTlEanZuL0VrOU1odDlUT1NIQjQKLS0tIFY3OVlCRTkzdStrblJRcjdUMU9Z
-            M0RMVVJ6SEprMWw0bndkUkQwM3VZeEkKzKMuS2KFgkOohrZspOwh9qCHKkCSllCN
-            eJCTf1mrryOacrJqfMrzq5H6F2k4mLFnhmycozYGx5kAwho0auf+xA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1MVk0dUIrK0wvRjVBRHBu
+            L0p6cnc3RHFhcS80N2ZLMExjclRFQjVxdVNrCnFlUFQwTGdNdnBaendCTTdObWpm
+            djdoTHhhWU55TWFWNUhUY0xqc2lUMEUKLS0tIGNVeEY2aXgyMlQ2TlJjcFZ5VzI5
+            cnFTSjBVSkxyMVJTNk5DbWZIVXVCakEKedOzjsIKE16Mlu19eHXD3XnhQ9CCRWzn
+            cKfMu/+yFB1r4LBBSMt1Bj2RLqE88sDShsKnw5RjYRng/bLjsa3h1Q==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-03T01:55:31Z"
-    mac: ENC[AES256_GCM,data:sR+fEP1eC+5MLZVKhY4H70eoFqoPrvTz1/H4ogtZIYF4YEzhywqbT3ap2cXexeFoy4ePL5O23pbLTaiUqVYKvRUngZZwb9d84foEg2i3hNcykjREL9dGUcSgnhwjcdg9ew8PqdGVeRQfjiU3Xeuuy08V39H6HSqexuoPvcIY4bM=,iv:kKXytYAXKyPqgqNlh5QJEyV+Goq3ACqHjcy9Ev5V95w=,tag:gocYSGB1cLv8YQz6otiNOA==,type:str]
+    lastmodified: "2024-11-03T02:08:42Z"
+    mac: ENC[AES256_GCM,data:S5KyIW9ohTxnv5BwKXwugKBhYd0ffPEd4p9m2iIXPdKPyYEhsJG7LtanRlkTXbSBTol5gwRs7LjiH5aRYmVESrAg6StVt4yKdP8woAOGT+7m/a12PCzNjIo2Hvlbg8Weq6Ld4KdrLGFOGe7AWnumgAb+pHCWq3ViBBWyQz4si0w=,iv:6a6b+D0/pC1tdS8ZDDYzIgzX6IQ9a9v+vB/fFmYK8MQ=,tag:BluW/+088Sy1ag3L6W+T1Q==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1

kubernetes/apps/network/external-dns/app/secret.sops.yaml

@@ -3,7 +3,7 @@ kind: Secret
 metadata:
     name: external-dns-secret
 stringData:
-    api-token: ENC[AES256_GCM,data:ksdnJcVxGrPL4xDKjcHa6Bv8TDuV3b94nmoBw+i9J70tY6zZfJgQrA==,iv:E14gE57CYGX5swR/cZLVF4Qm/j5kQu+W8U21Y7ynB2s=,tag:EEwV/RNQSOm+7H+reQoSnA==,type:str]
+    api-token: ENC[AES256_GCM,data:7VqySY0j3D4DJVc1QZewOf6dJ03HZ1GmCRYE+gUPsXJAF5kI3MnqFg==,iv:RA8VOyOIOqnrgA2YfK9m7Bhvnun/sg1vLX1a/xZKM/4=,tag:/vBXVQh706qHPBAS+He8Lw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -13,14 +13,14 @@ sops:
         - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5VGlCS2x0RW8xUEYxMVov
-            M0ZkVEJIdlN0UEs4b2k4NU9ETXNsaWVYUHl3CnZkQ09tUFhxa1U5V2crM25WUjht
-            dW5YclR1MWNPdXhVejFXWC91Wkg5YmMKLS0tIDhCckNMOXBaM3IyOHF3cTN4eE12
-            alhOVTk5VXcwNUpTNjFWWkxuK3lZczAKqbNGUK0lqLBgKeVzcUnzT415t3CNCRXj
-            45i2VgMB6M2mfX6IWOTIaUlsUF6sXOOVBikK8Lurvl1h7jPXDe/Ktg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjQ0RnR2VEMlg0S01CK3Vp
+            MWtBZUpJV2FYUDIvR0JqMXpEd1lyNFBvQnowCk9NaU9tanJNTk1VNHVTemlDMzNP
+            NXNVeEV3Q1BiNWtHZmM1SUVyTkN6N28KLS0tIGNRdEdZZjZIeFZBRlNDOXk3RS95
+            ZTk2UHhnRmZKT1phajkzckdkWUtDeVUKmCe5EE4jLtgLZo9TqeOcuYAaxqVdRpUO
+            jfGp+BgsdOyr588yj4zQcI4AumeNJcWgP19XjLtwT93825yK0EYpwA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-03T01:55:32Z"
-    mac: ENC[AES256_GCM,data:f9zPzF7zHyWgSdTB1XfqZSfsXn72SKaZeS579grcVetDGUEusRNGeyNrqRkzWW1i/zStXunGTvnTafinntgYpV22t6MUQufJpLIO0I6Hyh539txKvLlDSj6VmDpimM0bwyu2vqc0CUqX0dTQ+EH8OqQ8shjP4DwXvhU3NGMGbfU=,iv:PR4D/Ca4bhAek1obSK+rJM1qZ9+g/dpYs5P2DNgdxy0=,tag:jlpqC69dqtbvw9/GFw6fKg==,type:str]
+    lastmodified: "2024-11-03T02:08:42Z"
+    mac: ENC[AES256_GCM,data:RoR1gTYJSVW/3/2yyqOIjkaW4VIz4jFef4qIroGMnxptJ2Y7uO9ZkZXsK7o9fZ7Ea7+sOsXzJpzEERya86NH+PC8ppeK3G4uEAEvcfqQJrfSRrGiKGS/W7hiLbR8LbhkqttnA2NMf7UF2dBmGwXljEUYqF5tOGiFNjXAJx0uueo=,iv:vap9jYFu5qYLQQcy5qwCFIda8F0KViSoF4Y1iL4Nlw8=,tag:SLp/h+0iIK3otyNs/VKh0Q==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.9.1

kubernetes/apps/network/ingress-nginx/certificates/kustomization.yaml

@@ -2,4 +2,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - ./staging.yaml
+  - ./production.yaml