From 39c34175d0287b66939ae685ccd4d8961a423262 Mon Sep 17 00:00:00 2001
From: V <vlad@dev.local>
Date: Sat, 29 Nov 2025 20:34:50 +0000
Subject: [PATCH] fixin

---
 .../networking/configs/base/cilium/.sops.yaml |  5 ++++
 .../configs/base/cilium/ip-pool.yaml          | 25 +++++++++++++++----
 2 files changed, 25 insertions(+), 5 deletions(-)
 create mode 100644 components/networking/configs/base/cilium/.sops.yaml

diff --git a/components/networking/configs/base/cilium/.sops.yaml b/components/networking/configs/base/cilium/.sops.yaml
new file mode 100644
index 0000000..313b0b1
--- /dev/null
+++ b/components/networking/configs/base/cilium/.sops.yaml
@@ -0,0 +1,5 @@
+creation_rules:
+  - path_regex: ip-pool.yaml$
+    encrypted_regex: "^(spec)$"
+    age: 
+      - age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
diff --git a/components/networking/configs/base/cilium/ip-pool.yaml b/components/networking/configs/base/cilium/ip-pool.yaml
index f51e573..ebc9124 100644
--- a/components/networking/configs/base/cilium/ip-pool.yaml
+++ b/components/networking/configs/base/cilium/ip-pool.yaml
@@ -1,8 +1,23 @@
-apiVersion: "cilium.io/v2"
+apiVersion: cilium.io/v2
 kind: CiliumLoadBalancerIPPool
 metadata:
-  name: "1st-pool"
+    name: 1st-pool
 spec:
-  blocks:
-  - start: "192.168.0.10"
-    stop: "192.168.0.19"
+    blocks:
+        - start: ENC[AES256_GCM,data:2O3S2FkQVJb2PFSS,iv:8drlJXG6nL2/5Wkze+RlSoAT4/MCrImXIu8IOd4wFj0=,tag:w4IlRICYayiHrO5J3HMj6w==,type:str]
+          stop: ENC[AES256_GCM,data:1Xkr0IpfeyhUf+bW,iv:3ypJ+pvuE7CR6pMe7zP9e26iR5ftNcLX3y3zAP2DbM8=,tag:DthwPWi50tYBJhklAn2ssg==,type:str]
+sops:
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPWkw0NUFMdlFCRW9BRHVJ
+            REw1bkxvQXMrYklWOFF2MXVBK3d3VGdBOFc4CmM1ZEZtOXBiSlJHRnVPOEZ5MktJ
+            ZEZWU2lEYk9ZWFdLSkI2MXdQcVJma3cKLS0tIDV6QWNNaXcybDlMTGpjN1huN2dT
+            NjJyVWt4Vy92TEZSckx2QjIyWkZOSUUKXledre6C76z7NgZM3uMS4IZeJavYUucE
+            tntBQQvjahRdSGkwb1PzGiyxBAAXfmND3AAbtIDU7W7XAsMKd3Tq4w==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-11-29T20:34:41Z"
+    mac: ENC[AES256_GCM,data:9RH3qs2NzvOrLic60XjfOGyVzirRbZ+seXG68LNdgmdY0jjFOj6nAzOPC5T/emHKxpOrp8hdyH16pcA3ZvmwzveHpHKwVRY9kIUGtzL0hsc6WYWH8v9io2/b2Gv5SvssmJCCTVRMkLaR1c0DI7iJIMffDglNgrCydXkgsnUzsJQ=,iv:XLJUxsdc9GO9ZWrVSvqpz5fevmioW+z5/wZQVR3UDZ0=,tag:jy3LN4U4phA8tWuzg6YYEg==,type:str]
+    encrypted_regex: ^(spec)$
+    version: 3.11.0