From bacc9bdce06b74e044997d04f1289428f5395a5e Mon Sep 17 00:00:00 2001 From: Daren Lord Date: Sat, 2 Nov 2024 22:53:41 +0000 Subject: [PATCH] update secrets and dns server --- .github/tests/config-talos.yaml | 2 +- .../cert-manager/issuers/secret.sops.yaml | 16 +++++++-------- .../webhooks/app/github/secret.sops.yaml | 16 +++++++-------- .../kube-system/cilium/config/cilium-l3.yaml | 2 +- .../network/cloudflared/app/secret.sops.yaml | 18 ++++++++--------- .../network/external-dns/app/secret.sops.yaml | 16 +++++++-------- .../flux/github-deploy-key.sops.yaml | 18 ++++++++--------- .../flux/vars/cluster-secrets.sops.yaml | 20 +++++++++---------- 8 files changed, 54 insertions(+), 54 deletions(-) diff --git a/.github/tests/config-talos.yaml b/.github/tests/config-talos.yaml index eb3372de..c2e97e7e 100644 --- a/.github/tests/config-talos.yaml +++ b/.github/tests/config-talos.yaml @@ -16,7 +16,7 @@ bootstrap_node_inventory: controller: false disk: fake mac_addr: fake -bootstrap_dns_servers: ["1.1.1.1", "1.0.0.1"] +bootstrap_dns_servers: ["192.168.1.2"] bootstrap_ntp_servers: ["time.cloudflare.com"] bootstrap_pod_network: 10.69.0.0/16 bootstrap_service_network: 10.96.0.0/16 diff --git a/kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml b/kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml index 902060a4..b84463f9 100644 --- a/kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml +++ b/kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml @@ -3,7 +3,7 @@ kind: Secret metadata: name: cert-manager-secret stringData: - api-token: ENC[AES256_GCM,data:K+lYxeYTj3HQ2H6UaWf0zwHCM2lBWmlnrAhzH4JqWb6zH5kogtr6fw==,iv:tmNOu3fYngR6G4icT7+ycX32LFIA+qFKnJp0xmyXpXM=,tag:r9/m/5AQzlq4DfuUq5Ojgg==,type:str] + api-token: ENC[AES256_GCM,data:NxNHiS0X1qQrgxI7Jp+nnMkpFzeydRDXflUEKHPZdLk8jSkDO67b6A==,iv:VHdpw/lw3Bz9mVqJ5blmb5g8XFzIiuFtovrMLDMBZGI=,tag:RygZK4bR8Er58Jrz9KfJpg==,type:str] sops: kms: [] gcp_kms: [] @@ -13,14 +13,14 @@ sops: - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNR3Y1YkovY2NTRmpDanpi - ZU9ObVZpblNmV0NONTJ4TVc4MUVsc0REeFVvCmIwQTBPcFhwV0lqWVNoQzFSR2E0 - RHU1UW43L2Fwa091eFJGcjRsNTNxTDgKLS0tIEVhRFQrUTZodm4wRHBXZFo0d0pj - SDBtbUF1OS96dkFBWHJxUUVqRTd6dVkKl5Gfv/+H56Ojo59tnfncNBY2AsAwuBG5 - ClnZvAPaTh7x4FoKHnR9aLc7h2fW4dzAh3DRhac2kodkF+d36VOxgA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUbzgrU0YrZStmelRUdzM1 + NW9zYkYzcUVneXk5VkpHczNUQUZGdTlndkJVCnlzbnNlOW9CdGRLZmJOcmM4aFd3 + WC9NQ3YyYlJ6RUFXMFFmb1l6YkJxNW8KLS0tIHBJSFJ5WSs2M3JFSFIvRFVzdEZZ + aWc4TG8zaHBSelZHSHBLeGZjeFFMTWsKKemrqJ6UIVvAxb6bkDCjRVxsITWTkkEj + OWwgIRWM87JJjDdod2ZWZ3p3Q+S9aSW1oLX8LJ6RMZmkQDbMZV5qDA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-02T03:08:31Z" - mac: ENC[AES256_GCM,data:TPIdmqiTDPnz+8NhlvHJCPJyuWaeDld+ME0CidH4yV1xQL2piT8yVOUF9Boc0Si94yDMVno6CPZPgfoYfKFwOWVL2wFa4rI+Pp+71WbAyEyFjNfjeKwS7cy7CcAYsOvEhbzQeZImwFxjos2zL0DHRDBFPmg7eY7dH7VNyaq4od4=,iv:X3HEHEorlJAmQ08RIQvOEDZs3ojMmoabZuEHHAqqB+M=,tag:3bEeCHcxEGMx/VFBrOF4vg==,type:str] + lastmodified: "2024-11-02T22:51:49Z" + mac: ENC[AES256_GCM,data:nki0pm+kZW9rvDDdH4AM/oveYOdNydoHGOXOGBoc1jZwQxepsJrnmKWByQc7z7M+w5TNbCbVJP1D3Q8IMeq/xLjHkmFGW0CiVNH4UDByR1z3Bf5pJPJV4tT3MQGBE14Pq+L3JFM+CbLtI3lIBr75uqgsBHqT1vPqI1OYmxF/itU=,iv:8Iz8m17K7+HJf4rNIfZcsilGzS9o0cuWRsZLUqRhFJU=,tag:pRIkP2lhnPWmeSmipOtPOw==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ version: 3.9.1 diff --git a/kubernetes/apps/flux-system/webhooks/app/github/secret.sops.yaml b/kubernetes/apps/flux-system/webhooks/app/github/secret.sops.yaml index 8db1ad9a..a6c143d0 100644 --- a/kubernetes/apps/flux-system/webhooks/app/github/secret.sops.yaml +++ b/kubernetes/apps/flux-system/webhooks/app/github/secret.sops.yaml @@ -3,7 +3,7 @@ kind: Secret metadata: name: github-webhook-token-secret stringData: - token: ENC[AES256_GCM,data:NWiROTk5Zpcjr4bDHDMbjlLWGdk+ikp0WyxH0F6rn7A=,iv:SOTyEFiIx69wlACrw12e8Ik9bPsDnUO4IarMyNoL6kI=,tag:4j9Kryp3+KINfaMM+jN4/A==,type:str] + token: ENC[AES256_GCM,data:lowAe1xkRPt4xKZXTwSVTWlTk2dFw5PiLiI2m+NZY8w=,iv:A2R4jBWBZh/k1T7Iq5LC1vOjrCEIBjq+l0I0gEyOeMU=,tag:h7JilfUjt5Rfo6dx4tVplQ==,type:str] sops: kms: [] gcp_kms: [] @@ -13,14 +13,14 @@ sops: - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkUHUxejgvTjFWRkc0d2cz - Y1dsM3UySE9WZVZBeDc2MkZNNTNuL2tuRENnCkRjS3RCNmZUYUl1b2s1dnJTa1JB - UEJwMkxMRHRnaVNlWE1zZElkYkVCb2sKLS0tIEpiZ3VRTWJWMU5jV3lSOEJQRnkw - SFZTUHlGUGFNbzlZblpmWDNKSGRVdnMKFb6ScPXn2uOVRQuUpvSFjpy87HkS5dcS - 7VNyjk5lOr6r6gkiU9/qB1C8fBIjAKWJ45RVXFvOlobL3CZSnqJTiw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBqV0tGYmk3dWJnNndMcTBt + MXlKNU80YnVLRWFpQ1o3TlQ0R3JRVHF2S21VClREMUpoSStQWW1pQjRQZGE2TXQz + N2oxRVErOENEOVdIb2prd3ZmaG02STQKLS0tIFlVODZwZGlha0dZS1A1YitnWEhQ + c210TnlXeXo4bURPRDdjd2NBTk16bU0Kt/fK+GACMnuyb/rKT28qUAP/Tjm6S1eb + 5KBRv+egnQHFmr/G6geq1YDRjFkl5v9cA3tgxGdMG+Qtupw0fgGvew== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-02T03:08:31Z" - mac: ENC[AES256_GCM,data:7a7MDqfiCzD/eFuX4vgs8MNBvVLIoG7a/93dkOmRqiIhSmfyfh5MfQMhJGYhvlW6cbvpm/RGgOAcHQhzNNxJyeC0buoDAV6mWLCbXCpV4CNFu+cj0RsQdYbILIgguiX+VL/hsnLXb5EDFCck8+HV1SzgKmLNlRyeZ2kVKkIM4Qc=,iv:pUXnXq2fnyUYQSYonssqplwmkqOQILorPWc1rUV+yNo=,tag:jSPnQZ5Lc9KcQOaYqgbm/w==,type:str] + lastmodified: "2024-11-02T22:51:48Z" + mac: ENC[AES256_GCM,data:AaxZWdhW77f/pqZkxEbyxOu8rm3fF1EJSwMg0hmzNHuMw429Sw6Y9LPFLbXWKYCurRLwYBc0y/JKuDyUv+ODRhqEwqUY888v6FlcxBbfErIz3KLmJVvRbIrpq+sidgK52qjL18zxaTOXz4wWpgksBwsya2HjXbK1lGZAHVcXqFs=,iv:K1w+sEQUzlG0Cg2eI2dS8OUzvhYMhy4pkn2TnMNiW2E=,tag:V+oxo4TmPj/NQYrvh87G/w==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ version: 3.9.1 diff --git a/kubernetes/apps/kube-system/cilium/config/cilium-l3.yaml b/kubernetes/apps/kube-system/cilium/config/cilium-l3.yaml index ce5b7dad..3a61c4cf 100644 --- a/kubernetes/apps/kube-system/cilium/config/cilium-l3.yaml +++ b/kubernetes/apps/kube-system/cilium/config/cilium-l3.yaml @@ -11,7 +11,7 @@ spec: virtualRouters: - localASN: 64513 neighbors: - - peerAddress: "192.168.10.2/32/32" + - peerAddress: "192.168.10.2/32" peerASN: 64512 peerPort: 179 serviceSelector: diff --git a/kubernetes/apps/network/cloudflared/app/secret.sops.yaml b/kubernetes/apps/network/cloudflared/app/secret.sops.yaml index 5ebc683a..a0a0ed76 100644 --- a/kubernetes/apps/network/cloudflared/app/secret.sops.yaml +++ b/kubernetes/apps/network/cloudflared/app/secret.sops.yaml @@ -3,8 +3,8 @@ kind: Secret metadata: name: cloudflared-secret stringData: - TUNNEL_ID: ENC[AES256_GCM,data:FiFbyhSvGFroUCYBz/ALDw9Pf04VYENY9Kj/sVTOYHX1GdGs,iv:MpfJp8lP+cC/mDMDko+PdMGOr/RRUZ3KUZD67OZnR4U=,tag:/CybBZcrHGxWLTaCLQl6RA==,type:str] - credentials.json: ENC[AES256_GCM,data:xERMqkcrMtAHUZdzpHoeXiAfx4/a7ucCVmsW1ObbQHpWkULZbqJ4EOpncUZuYsSXNfVWz0yL00uLY9aJ/vkvwwMCx9A7nES57N8ILmHKmG67Qb7awxWjqtaUlZh9YBPaMyRcPw1BlH7u4lgUQxJtK5hBDxwVSGsbNh9bz1n/ivQ3C+oQydYWmPjNyU9l50ReHN+bMI3lkQbFaCOXEYlZK7wuaV6vGe314BMkLIeGSg==,iv:B/f2P0RvWlzW4tgTqxcxoBbldwEvWuMPSXnLxuVdnzo=,tag:PGap1OP+aM3kVtt6YV7jFQ==,type:str] + TUNNEL_ID: ENC[AES256_GCM,data:b760NW/oZs1YCpxIkvrVtpuwHYcuPvH0m6WjiaYmW7ht2/CQ,iv:e4hD1dwvp+kfjlatk6yirkvpk5Vu8POc4MTMUz6iUXc=,tag:ISv+Y6K+CIL5Oszuwcmgxw==,type:str] + credentials.json: ENC[AES256_GCM,data:itYnFMRvxJZaB6fLSteD173ZiUKO5TCaFbdLHlOn0qsJhlTnIE73fg4azLu6CqpU1ggdU/ZFLHMnA4ZGRVWgdHCKp5g0mtL8bKkHRaPj38qnPp4EmF+0s2PKAptLLInenow+jvZmgNgT0xuLKbKWf5ag5qzSKQfLJHtUHUwHCSetSEqRTYnMUFKu7lV1J0PMrgeciqcGO7/pIb9tseBoLeL8w/f+JsYUqoDR3EEpRw==,iv:XDr58jd+jVGjU5QV98uRwxHAZaYONG8m2LxdENFEAqw=,tag:QQKao3hp8kePaNbUD4PbOA==,type:str] sops: kms: [] gcp_kms: [] @@ -14,14 +14,14 @@ sops: - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBWmtHV210YmZLOFR6c3N5 - Uk5LODk2QUNDa0NBZUlzVUdSdU5jY0pWQW5rClFHQkM2ZnZsL05kaWF5MmZMQWtx - YkoxZ28rVUdUY3czV05HdExmY2FmancKLS0tIDhqTXhhSmlrQTlpQisxQ01UdmhM - RVVWVGxBdkJGQlhnWGdJUWlyTlI4cTQKmpFTzUtqr2AjjqsCRp0ep4kJ4qIplQRg - praMhq0Nnr6xovMzcN75//L3A1bybeSU72s4Xg5+7wcm6YSqvU7F9Q== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEYWZiMnF2WGl2ZkkrU243 + ZWtXa0xaM1RRMmVRTDVXSC9KZHZTdm44K1hRCjZpQm1jaTJLVTI5bzhFQTh0SnpB + ZFZqVGx1WDdYdW1obExta2JDK3FDbVkKLS0tIE5pR3lRSmF2dUxMQ1h2ZVR1RFFJ + NURTSnZ5NGNYYXdiaDlNYWJXNDk5ZlkKpz185KxU8fNDSJ4DC4fNgw9RawKddLAC + gVvoJ2ptPyzVRyoakYsoJfT35eiVOH3PRjU1upQWeIqxiQ5pyeBHlg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-02T03:08:31Z" - mac: ENC[AES256_GCM,data:lcyj5ULEeDo3q1ryP97KYVB/WqWfeqiL17T13/AQ97E9xDeUXgpI7x754t30Tld9/dVZL1/mdYIaEYcQumuQ+9XWMppK5GxTFpGFgZK44QPTajgw+Jlpxd4+VJIyGM8RiodKqq+5JyAEq2o2FeV9HAzB6cY9WtDt7r80LZaV3ss=,iv:ew5j0lIdJoPWx+9IMb0wHWiRTcFSkwYCEcK3mwUghn0=,tag:CNOgke3Hq6zLGu30jfoyBg==,type:str] + lastmodified: "2024-11-02T22:51:48Z" + mac: ENC[AES256_GCM,data:A2L0pRn1CiQYSwYsb+iFV4YFzy6bzWySUJYui4VknsB2oKldu2YBGc/YvnT32wP6tjEUT6hAVia8pvmDNksgH736wPhLdTjOBI2SGWe5uyFcr+HrS51+Jeh3EfMN8g3JxSpnEXkxjOO1hANeohRk65+HgUASXcctYXls6QV23mk=,iv:pJ2M2l9bf9c37O9Kjkw8aJLida05Q2Y4E4eKX9xF94s=,tag:uAodvAzn+4pLMgfOgc9bzA==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ version: 3.9.1 diff --git a/kubernetes/apps/network/external-dns/app/secret.sops.yaml b/kubernetes/apps/network/external-dns/app/secret.sops.yaml index 59d8fa35..a8e8fce3 100644 --- a/kubernetes/apps/network/external-dns/app/secret.sops.yaml +++ b/kubernetes/apps/network/external-dns/app/secret.sops.yaml @@ -3,7 +3,7 @@ kind: Secret metadata: name: external-dns-secret stringData: - api-token: ENC[AES256_GCM,data:1vzAE7Yq6l6nj6yU06yfGnGA9EcUcXqsD9mpgL7Z6DbMoEYQKsmfIg==,iv:qAsN02IoWfSTBlcBK+wH4yMZnRETdQrv/H+gQ5avUyw=,tag:f+0ndpF+HdxKcXaYhwS5pQ==,type:str] + api-token: ENC[AES256_GCM,data:mq9lRs57SkZIDHue3WDKwySWF1Y6F9ja6H3v4P98XamMAEAp+RwMwA==,iv:U1SeYr6N9p/hqGnbu1xeUFyOkC5MWCYDa+ahYid3ON4=,tag:v+P0b2+eWPBEty1mHftOzA==,type:str] sops: kms: [] gcp_kms: [] @@ -13,14 +13,14 @@ sops: - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4OHptSGR3QjE5MWdkVXEw - eklyNVJYWDkvZUIyYUtRRWpIckJOT0xETEVJCmFtakI2MXdXWnR3MERmY1JSMnc0 - L3U5ZlpEK003NkVicHJQMys3SXRaTGcKLS0tIFVUOXhjTHVhTnZmU0RvdTQ3TkU0 - Slg5YkczcXZIMmtyTHpSd25KSEJkWjQKrzj65NzXWF6H+0iaQflEC2RkCDksWi0+ - mpLEY8mto5ZBFaCajymk8quASvIeKLlsFsAtSNt6LzhBepeuuz2BMw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlQVJEMWh3d214bUZBRVBO + K01HSk5nVUFKSklJbzVIeFNTZUU5emZSZ1NFClM5Z3ZxMldzYStCZDZ6dUp4ZFVi + Y09XMHB0NUk3RVV5dEg0Ny9wMU93T3cKLS0tIHRBQW11Zmx4aUxhWUM1QkhLSi9r + VXdPd0UvbWo1citGWVBGOHdKRVJJK00KKy4uq8SeuibY2vrJSuJPqVyWp/8wRhtF + wxmPSjUpsFLytO439x2ukikj9f1WkjUL9svffktkoZrzZlGS84/QRQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-02T03:08:31Z" - mac: ENC[AES256_GCM,data:ZK7X1cagcbdquAZKRM/whUlUEcc+L0/uX9Ria5s8y3qPvXuhUAKPOzgYJeo4vV1MLPZbTIQgSLfH8PiN5piL6kbSJ0Yg3dHCDBOuP4MMp2UjWsy0tJcUuCObTQ5Vca7tiuYS0VFrYUIqTkZqw9BLC8+BQHB3T2+TcYe1Ht5k16c=,iv:f4/LgciTaakUAAPku4588GsEXqS04vfS1LvH/fvn4Lw=,tag:4epCAlsyxmyE0hOELsKrbA==,type:str] + lastmodified: "2024-11-02T22:51:48Z" + mac: ENC[AES256_GCM,data:6M9lj/KJEyziIp6AaBqcntzctg5QzJ0lg5r1C7oQRpFRqfek6rB21Ve/zuxjmhom9LZtVOI8YXySmuvHvjCtjG6simG5OgU2L/kdUX+arwCeSlKC+Ldk6ODK2HPy1bqqJZeYwnSGWRKkY9WYzWTNHakr9sWNZRVsmydF6MNGNnM=,iv:4vOWNIbdhjd3AC25re4Sc16Qvpqf8eYFI2wrwdjNyig=,tag:77HjhrJzpL6rTHa2ezJZhw==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ version: 3.9.1 diff --git a/kubernetes/bootstrap/flux/github-deploy-key.sops.yaml b/kubernetes/bootstrap/flux/github-deploy-key.sops.yaml index ff7df0c4..cfa2a1b6 100644 --- a/kubernetes/bootstrap/flux/github-deploy-key.sops.yaml +++ b/kubernetes/bootstrap/flux/github-deploy-key.sops.yaml @@ -4,8 +4,8 @@ metadata: name: github-deploy-key namespace: flux-system stringData: - identity: ENC[AES256_GCM,data:T61Y9taA4F6gr7PGhPXAS5NZEeN6z7hHtT4H646bJvSRcVsoNGgAIooW3oN1QtiG36Gxyn5cwBqnDYVKub3Q0g39Voq1JZr3mhudWDgqF2GUj9ejetkAZ9kN18vlj1xOEt7LZ4WEqc1jn2ie+WrurMLQI/9BtbKESO195Q2ms/8S9dHhlY/FjkTqJMIt1/+5Qj8Cwq3iKXo3N86iV3sYrKLdGCT3Cb7jsuZ4asQt/U/n+xaYTphYagC8KHqZTztpL+FChUfvU/ZdB2A+HYicqmO8ZKcr3/8NZTx7G6HFkKnVsYQRVB1gJZFQFk5jpVVOd9fyjcc3pUl0GxfyZhfsRqSTItAwNjQ2w8P+8peWoPoFthpxFtti/onUgfwPh+9ss0F/BA49z3dlzGgvkyzErf54Rs0+3NX94iVwo1cdae+uHaDNo1GzBlhcTuV2u9j/snLSkgw7/CAj2Wibgof9tbZVcOvxWfiokX5Z4ge3WAqmNHlsd+IvvSCYnDGHnEauHIDBizCi5jOT3n5vWopuABHKgdYMyuFBczw/Rp053U2shXiSam4Z29J5ogrkAISvmG/e1EzfYbeGJUEsXHajl+TqfH3RcncfPUfGxCsbeEdfgMH5N3B8LJPbMO1jfxcg5hw3wFAgKPftfevoV7it+dTP8LovV3zVqtzJVll6r4YbHmJf4kM+trIg9Bk9hdWVpLnFf9FF08YkiRKHugzFXLbPCGWd10vCYIQhbxyDgGzNWDjf/+0+SRJLd5gfMC9b8S/OLodk8Xgw71SXyQTbtDtY6+Vhd6Xe6UE/76uZ0P+Fg7tkE26g28MjnNZaggvXcBsD8fdvUX6ei3NqD2LA1AzOC5GCOF6btWiqqdxLVdNFBeMJsfSSHrb+OoeOMmi+ptOhIpxUpsg3tIbbba49LUdpK++eZJIGL96/Eyr0oPKtb/pv9vio94PAboEUc9TvBSequW6HV4z0/JhLr1XH5w==,iv:Easc0xupTic+XvSqU74W1+olwlp/P1UfOIsTgC8vBgU=,tag:F2oDk6XVL0mDH8ccAfbimQ==,type:str] - known_hosts: ENC[AES256_GCM,data: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,iv:PiVwSujCYo8GJHWEr1tED6nOv6nKipC8sD8QYNLNVQI=,tag:kSPC7DNab07P0T2zlwjzbQ==,type:str] + identity: ENC[AES256_GCM,data:xFJIWVlslK41jXo+9vIUVhp8aHi+dUYlpu5QSec3SQA413R7UJGDmOT2J4KnVaFMugaeIbWp+PlY4gq+CVogN+rpXqgK6O/x+KqHe6cqOW6eOwY4ToOJj1IeRBEq+iq26WUXrON+VmRDPAnoVQQrNfqpw4T9ojhfWfsN45tI5F9/JAgRa2W+ob60mlq0tKG3JTzRb+7vgUZdCrWnDx0jV3wF3+CzFlDfapMyssLLrFMpnujIc4K1GhqtIhkscaUIhjGVxmIhRbCP6l/8D1vcxwU5NSt8S2chEWfw8TcQhI76soiMRD+8XVhvDlMjadyqohb5MnUPiUjDiXc152doHMyydHYems6ualQlNLQQy3tkblk4mZq1N98oS+OPlpRx8BYrB7ptOVuAdhgeOPk7rtbaxaJEYOnpM/xQJ3pgHd204gPAS/zgglI+o0s4s+N103iK1HDKPzxS7t3mIPE4pVfPGoJIqosJ/6YnLOKlzYyhVhoyRcuOZOf02eOijjSeJeAiuwcvApHXlBAWDnRcks+PGuHi7tMskJsL/uw5wnp1pyTkjq5KM0wGiq+1Dw+YFd1PX3uTMbv8DUMJYGKOaOInQUDR8v2YOLW9m84slvZlWqR1H8D4D1fVo2oFnDKonjmdOuX0DMiuiMmvGeqAkq0JjVaLyr1qTZohWonxjAF99oBnw4I5rQThb9YihPB2apK2sFOA5aiSWv8IqXf5Td08t4Y2t6HX0PkgqNyb8VQEH+6svR8O/hq8bmzcAYLnGF1Hcy9zQ1TGhlFg8GaT3Lc1GFW53eITh62uWN+aTawY8Y57fYINpA7oXvGoc6mfytARpPhX/xIud5cuouhQLAZcrJo2hPrIHT6BupTiGglrjHPK7LWjENCcfZoVbt0aG+e4ji+xEmVLtDILMowpi64AHJlsmYE7AVQkoj0UIUUmvAKMRxZILntuplOBYRTwmr18v6RX0CqxwNStqmRlNg==,iv:UsVxGor99adkoDIrUugaVzS0vBfVi3EjW/nM5BxA1Z8=,tag:sO/yjKGgCOxI47O3vVi3dg==,type:str] + known_hosts: ENC[AES256_GCM,data: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,iv:PpnvGDJt7lq1Z5nAndsXXzlZEEQfaY/49lkXqN0gIh0=,tag:O+27CrqYyyHAF7OLs4DuZA==,type:str] sops: kms: [] gcp_kms: [] @@ -15,14 +15,14 @@ sops: - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhako4Sm56ZHRCRUMrMFlN - Q1RlV1FEaVVoaWUzdGp6SWdoOHJRNWpjYW5jCkJyeG5RZ1BEMWZMdVg2dUNieVRS - MldpWjVrUFp0RkVtcXhJYWJyTWh0NEEKLS0tIGprdW5XclFLUkVJcHk3Z1ljK3BI - bVJJcEVWK1VrL2ZsdHM5TDN2dTBXcDgKRVeJs4WN5LvPcW+Q/YDepgrpSQ+qhuvR - 1oATHP1k7DXdCYYDgJ1n814blix7aFKU3k9gc+K14GPkKzQH/FzAsA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzNXBValA1MkFXa0lNRUJ0 + STh2VWUvaEkyQ0pvMnRoUlRIZ2o5NS9PMjBvCmpnb0taZXA4QkVaTXp4ZXF0d2RT + dW1keERwZVpnTDdjUEhpaXRId3ZWY0UKLS0tIEFlT1pYS25YVVAwOHJ3WFh1c2Ur + SDVnSHpsTythNWxSVlRMVDlHUW96M1EK34yYrAnnLYpOgXCk4Gwd2FUZDvuCJxRU + I4h+6cM5i5xzYn6R0azQgcLw0U6kqUK8git6rxbhgwCTnTXs5en8QA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-02T03:08:31Z" - mac: ENC[AES256_GCM,data:RerX6oYVGvNK4qbzeS/XN/tdVTomf6s0kTlOkNEWUPrQfUS/CsnG0DXeamHV2vAl85SQwVCePaUTxlArGxTsp6yoBQm3+TPJ0Pazt/Tby3gKn6oABs68JFzb+UYsx+/ACSLkg7BNy11jti2c2nopux7gHNfP95vIEElSP3OZNKU=,iv:B4VlBCUVC6FuYS8DkHBRs9pCsaMBk9ATjI15l8QmVkE=,tag:JSIlZ+xxQVKJchFwGIWekw==,type:str] + lastmodified: "2024-11-02T22:51:48Z" + mac: ENC[AES256_GCM,data:52aniONxDtVmUUbmQO0Of2IkgicIfZDlgCfjpt6U4M3GdzSGmS4Sv5+2o6bZli5jQCfpH52KEkrg/4FazEcSeGOs3yauH/LVGcunxUZkTkuYTNjJU9sRat1ZPPMF7dW6i5pu34q+rJEEWwROCPePPVm+qLCRgwntvkcCO0ebZiE=,iv:8ph9ExhIaNHCLTMAH1+dzKciuHpub3wtyY4RKIfkR8w=,tag:2PClGojbpV+P0XIhT7/8sw==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ version: 3.9.1 diff --git a/kubernetes/flux/vars/cluster-secrets.sops.yaml b/kubernetes/flux/vars/cluster-secrets.sops.yaml index 2e6241aa..7efec102 100644 --- a/kubernetes/flux/vars/cluster-secrets.sops.yaml +++ b/kubernetes/flux/vars/cluster-secrets.sops.yaml @@ -4,9 +4,9 @@ metadata: name: cluster-secrets namespace: flux-system stringData: - SECRET_DOMAIN: ENC[AES256_GCM,data:AkEtounpQVN8gr81,iv:wGCXeJR1B0msV49hx/dWcZVS+f5PAmGcCOWkhc8tvrQ=,tag:c/j/Y24mF97IAB2lO7YJMQ==,type:str] - SECRET_ACME_EMAIL: ENC[AES256_GCM,data:z1T05+4LPnSO8dia+/Q4+JClgtA=,iv:1I8r1rrAZhjeY/9glFU5Ow1C022yIHa4hO46TfzopKU=,tag:Tl8Q6kwvY1E8DsQlNnW5WA==,type:str] - SECRET_CLOUDFLARE_TUNNEL_ID: ENC[AES256_GCM,data:NkZiH1RAXFknLNPhmyLA6osTbBEHmFqBmZGGbpQuRMwbo3zu,iv:fF1hnMZWpRetgo9Itqx4wY7ISIYnIihDF/dAdygX7hU=,tag:P1bnyqlt7PUPmP7L/WQPmw==,type:str] + SECRET_DOMAIN: ENC[AES256_GCM,data:pjOnLwALngb2TYhn,iv:cabBq7HbfR2MI8olJYJoKX7fhbIVDWnXJdZBPhMSdqA=,tag:Rrf70nkJNApOsSa+4/kvqQ==,type:str] + SECRET_ACME_EMAIL: ENC[AES256_GCM,data:W6UDzcMB3USSZXkVfb68X5UVmMs=,iv:PkS6hGjKO80MjkUV6EsOpm6PG3Qpbo4BlBvVM1s2LGs=,tag:ECzwK3HkjQCMOS1O/zTTPA==,type:str] + SECRET_CLOUDFLARE_TUNNEL_ID: ENC[AES256_GCM,data:BjECCs6SSL3/I/kIbBl3yXFMZs0o/+MjXJRDDFwapeg2PVTb,iv:CjfQe6CYXSMOZJE90zlqRRl+ug3Lj2e87XQw+8pp72E=,tag:pO0w6b0YM6fkt9oyB9C7aQ==,type:str] sops: kms: [] gcp_kms: [] @@ -16,14 +16,14 @@ sops: - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3OUI2QjNlVXhyb1VDSUtu - c0FmY2grbXEvVlBkajdJTU45UVZOcU9YRmxrCkxHZVk4NlkrdllKekxRRk0xNm9J - S1Vvblc2bkVVYWJ5SnVIcmxxQXA0MWMKLS0tIGo5NFpBeFVmS3hnMXBzaTV6LzZu - bFZ3cVhiSCtxWTNHQVluKzlYT1o4REEKaQfwIn4KQFlYGfzUP97kU3RijYh7WPqA - er6KkDnRNeldmLzExOqi1t9ic5hcA/PuVMf8wIv43s0DQTHckYFHPg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQZDdtSjFSb2R5VlZXdGUr + aUltM2Y3UVBWSmw3OWpBVmFJWE1NUU9zL0RNCkxXSWdGVytNSzdUZTh0S2FTdFQx + MFltaUU2bFlhbE9ZcHJWaTdQTlRkSTAKLS0tIGtEdzlkTGcrY3F0TS9BdTRqYnd5 + MnQxblRVaW1ZSXpnY2N1SFl0YmNjR0EKfg8sG/xiLtqAAEYpkR7/wF4lA6/8ZXqB + hIo/TYVNysNPMV0scDB+BCgVs2pQYeuvZo4IIyeY2vCZ1nGB+f2rvA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-02T03:08:31Z" - mac: ENC[AES256_GCM,data:H1TqlCAsaGzvumbW6lcPRwnXxVQFxdKl38L11Ta+DeKijDzT44UOF83TSfgglP5sbB4gLajs/XayhyY3bgrYdOU6ryIcGNd53wZbFZcxAKr/RKNcMXWxwZ+Aoc5ThG4A7IwNpzxGtSSXAsvJfBkcaaQkWEctgXse+4cSv38dqog=,iv:N953xaN+WBxHkTlM4A7ZKeITt76MXBiGjlUu01Fq5F4=,tag:0oharqFqp7veqkdvIJPSHA==,type:str] + lastmodified: "2024-11-02T22:51:48Z" + mac: ENC[AES256_GCM,data:C2vklWjiy6DQKdGU7yT7F+fok5BB5/R9l9kVu6DWPIZJnEBjtsA6W3weV3fgHYghKy7etRRzQ+x9BSWgBE3xB2njYAIyKeN3l5dIJPoB+2rEaSPqihgGmLpVOCU/UymGmn12agfO85RTxqDtQUQCh41reQmuZs9muWUuf/6/vik=,iv:RcxeuQ+34rXLVQ0anLXGGifx1pEVdYhbDLObtXmBa94=,tag:KA06FRltzyUvz7vTfev3zA==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ version: 3.9.1