diff --git a/components/monitoring/controllers/base/kube-prometheus-stack/grafana-auth-secret.yaml b/components/monitoring/controllers/base/kube-prometheus-stack/grafana-auth-secret.yaml index 4939942..71d9348 100644 --- a/components/monitoring/controllers/base/kube-prometheus-stack/grafana-auth-secret.yaml +++ b/components/monitoring/controllers/base/kube-prometheus-stack/grafana-auth-secret.yaml @@ -5,19 +5,19 @@ metadata: namespace: monitoring type: Opaque stringData: - values.yaml: ENC[AES256_GCM,data:RWxkOVXqeE+NZQ+0BrKPB4lrgNZ+hZVIz3/YkdOsu/HzDrPKjyaK,iv:bnC0wh+K9jT6X4VEC+Nb4zfuPPF/BFTqAOTFv0YUdTE=,tag:tWW0pBNPwY7yAOMTh+CIHg==,type:str] + values.yaml: ENC[AES256_GCM,data:92+CCaQRpzVoOmOB3KEVnvEvUQQmm+TeeZ49SQLZjPJQrZtZMvZa,iv:GEH+lFkOge6YdlVQJAerA/quKcq2FDHWvTq1NlcBlZs=,tag:AGA/M8jR6uDNDFF4QEn8cg==,type:str] sops: age: - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2WElnVmpXL1JPVGdxSEox - WlJITU42eE9jQ3RuQ3RzR1J6ZXIxYjVGNFVzClRPNlNlalZZRTB3UTlkcnlNTVF3 - ekh2Ym02SFlFNEJKS3VIaFJwZERtNVEKLS0tIERybExNMDZDK3AxM3ZUdi9XWFo5 - clZ6MEIxbCtSZFBwckM0OTFxUE84S28KCMsNp5dtYQhH5J8/G04vzZu2ejNO4FoC - CS9dFSiN8zZ9lfUtwKkTHVR9QeYKtOXeFcpPMH7S8ebQ4apPHP/NUw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFU1BqYjZaUncyZTRVanZs + NURaVlhsczgyVGtneDNSNXFBelN4dTUwK1hzCnE5TmVxQTdUb040eUVyclBGSUs5 + aURKUDdHYm5mWEtSUlkrQ1BGUm90QU0KLS0tIEhOVXI1N2I3OHExazNRaWh3OG92 + VFVGcVJiU3JnWTdlVU9VaEVlQjJJS0kKEwflCvuyRJGVE82FQJYv11eQGR3RBTVc + remCV/a2JBbc6FHr6CFA2UK9utgiqjLgdEIV7op9qnEB+VPK/WrV3A== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-12-06T14:33:36Z" - mac: ENC[AES256_GCM,data:n2tiJq10ECYPeyptwawf1APEDXPm8pclxDZsej1xmsQ1KC/oG0M/WhhPzD2AIVJ23cKHgoV4m/6g7yt+WIAcTSREq4doHJbXExvjNY2yrVsVuM4Vq/ISM1GgPCHfMGFIzSQ9dTHpUmf7twVTsKfOehta9VAjamlts4l1kBctHK0=,iv:XPSkwFdF6vXAs5rlojt81TMkJBgy2gXOT5WnA0j74mw=,tag:KiJm+WDtRGxxiW4weAJ/Zg==,type:str] + lastmodified: "2026-02-01T13:30:30Z" + mac: ENC[AES256_GCM,data:npYGp6HghCG6EtCkLWTQWcF/NkxxTZ7goT5S8YN5msGDb8f8z9Ky336aKJExYbp07UqMtloAncCdKsmF9Kf2BkKAqgjtq/0LJPN8cy2963ITK4JGRgLrvDMiYIx7MjEkJl5bSi00gOG5wLNnl802xL1vRSjrjv5frkx7X0aTeQA=,iv:ScUuhHPIU5WtxKi6l2vHqmG2VLiOsbRTwTrzp/5VY58=,tag:MHh1rOWLJbCg2LOH+cVmZA==,type:str] encrypted_regex: ^(stringData)$ version: 3.11.0 diff --git a/components/networking/configs/base/cilium/ip-pool.yaml b/components/networking/configs/base/cilium/ip-pool.yaml index 7a83916..0fe662f 100644 --- a/components/networking/configs/base/cilium/ip-pool.yaml +++ b/components/networking/configs/base/cilium/ip-pool.yaml @@ -4,21 +4,21 @@ metadata: name: 1st-pool spec: blocks: - - start: ENC[AES256_GCM,data:AtRtTh+2KLJl1we+,iv:kGE5B2p4qGaYBQw/1xt4Zhlk7HuEFLHJnZuEMlYiO5E=,tag:qRgE3tr9tSPDFQnNmYldyA==,type:str] - stop: ENC[AES256_GCM,data:CAXUaHPDWoR/SwgV,iv:BqOGR7A2qZSaW0oAJTf5BGRjsRPcoWA0AKCIgas1UUY=,tag:Bw9gv0UtapnJuC3gAq7vkg==,type:str] + - start: ENC[AES256_GCM,data:26y0zfU3PAIY3X56,iv:bZhfz8YbxzOdRlYyo8djYhAbLVT4tZr86sch5LuUwS8=,tag:qd09uoW/55qdory1H9JqMw==,type:str] + stop: ENC[AES256_GCM,data:1ncnUkw+V2sqiJXt,iv:RT9RCMXD5fWn9XAaHA2XTsdYcd0E2x9R8X3dgr3n6cI=,tag:ljeCi0OHNIbYkNJinJQ/Og==,type:str] sops: age: - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAveUREcXUrYjdwSnlqczI5 - cUlyY3duYnpmNGRpcmh5b240ZkxYa1c5RlNZCmpCSmNESTJQRjBVTXROWkVJdkUz - Q2NUWnErSWVqeko2ZFVuQUN1ZERhZTAKLS0tIHdDTDVxSmtMWmsvM1crZ0Q4RlU0 - NS9qUndWR1BuakR5VVR1WVZ5akNmQlEK2yBGVlbApSLVeCvdqENmrY4ERvQ/ehGF - kAsWSpf0evesxnStkDnyJEII3ZK3YT8wuPTvjs05LwXYqCqA00XCSg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNdC9kNThXR1pYNXdndSsr + amVxdEZYQjV6WjV6Q01lWHVlMUtUVjRQMGhBClRCK1ljaDFiQnhacXJ1RXIrUlVY + enJ5T0taQTdDSkRqaGF6K0p3NlI1RGsKLS0tIEUzUVdtV2orek9OUVFSbzltajMv + UFFyMUpQREhSbTZEYWtUa0M1Mkk3WE0KlQrgJjFa7z3WkRfiQGQLwuD9vh7vqsAR + wLGPL4Xmz5MTL6/FScij3lZJBlm+4Tn2/VLznuJATIT+rgD9V56IRQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-11-29T21:18:31Z" - mac: ENC[AES256_GCM,data:GMS2NzcIu9On1FspEiUygWgnTTv1maghUHgWNnJ5OsIyhpNEuTU8+0zcn/B4gw3Ve7aDc+BxBqlmWo3xLIMd/OVYUUfN7PULWzawcJ5S3d4m/8Gfc9Z637bRgszK95zy6FJgIuFqezFOaS4xw6bCfZo6/KsErie6Jo8mnWenJXU=,iv:MNUsJj4rFtB+ow0DI2VNw3GNWh8s9/b3EmMWhHhhk58=,tag:AMKibjCefa+0P1OJSvuFiw==,type:str] + lastmodified: "2026-02-01T15:46:05Z" + mac: ENC[AES256_GCM,data:RFrfcBBUIKaB1ALiMP0OO1tUTu457FxMqVL4vYkLPrLnMhcgCN/oyTp6mxVNxzMMr0gH0wLUy5iZao9Qjjy8MvmPuD9TxXwZXtXwb2dnRK6SzzGHNYJ2glV9Pktp7s1seeg9uImMExp8kHjs/j9mMNZFz05CGOjYU25B7I7Go6I=,iv:Uw4u+sOIZ0he3r16peODlkNd+oDFexlCdNUUIEQNRgY=,tag:uG89R6DqqScbalEJQmhumw==,type:str] encrypted_regex: ^(spec)$ version: 3.11.0 --- @@ -28,20 +28,20 @@ metadata: name: default-l2-announcement-policy namespace: kube-system spec: - externalIPs: ENC[AES256_GCM,data:uOu8sw==,iv:TbIpLCquwJyXqA/rWVmci28pOIpxlooMwUdQvdkwpW4=,tag:0H2MDoglCc4kc+2YFsrViw==,type:bool] - loadBalancerIPs: ENC[AES256_GCM,data:+0SbWA==,iv:IC/dkCV/Oo9n4WMehKE75g1rpZvZ2RwTamueKPYyPiY=,tag:lhrXx2Io0Td8xzfVuoO98g==,type:bool] + externalIPs: ENC[AES256_GCM,data:UbMC+w==,iv:JcLNojC5qSRmDQgDtlWSMCl2KQCSASxtOb7+ZapKjY4=,tag:SpoUA20u3MszDUj79tUXqw==,type:bool] + loadBalancerIPs: ENC[AES256_GCM,data:ypiEtQ==,iv:CZna6f6TeW1W8kjDQFE5lYBMAam2n58iNyByMnUQu10=,tag:w2AVMVc7bxWU3W3g7oHO/w==,type:bool] sops: age: - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAveUREcXUrYjdwSnlqczI5 - cUlyY3duYnpmNGRpcmh5b240ZkxYa1c5RlNZCmpCSmNESTJQRjBVTXROWkVJdkUz - Q2NUWnErSWVqeko2ZFVuQUN1ZERhZTAKLS0tIHdDTDVxSmtMWmsvM1crZ0Q4RlU0 - NS9qUndWR1BuakR5VVR1WVZ5akNmQlEK2yBGVlbApSLVeCvdqENmrY4ERvQ/ehGF - kAsWSpf0evesxnStkDnyJEII3ZK3YT8wuPTvjs05LwXYqCqA00XCSg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNdC9kNThXR1pYNXdndSsr + amVxdEZYQjV6WjV6Q01lWHVlMUtUVjRQMGhBClRCK1ljaDFiQnhacXJ1RXIrUlVY + enJ5T0taQTdDSkRqaGF6K0p3NlI1RGsKLS0tIEUzUVdtV2orek9OUVFSbzltajMv + UFFyMUpQREhSbTZEYWtUa0M1Mkk3WE0KlQrgJjFa7z3WkRfiQGQLwuD9vh7vqsAR + wLGPL4Xmz5MTL6/FScij3lZJBlm+4Tn2/VLznuJATIT+rgD9V56IRQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-11-29T21:18:31Z" - mac: ENC[AES256_GCM,data:GMS2NzcIu9On1FspEiUygWgnTTv1maghUHgWNnJ5OsIyhpNEuTU8+0zcn/B4gw3Ve7aDc+BxBqlmWo3xLIMd/OVYUUfN7PULWzawcJ5S3d4m/8Gfc9Z637bRgszK95zy6FJgIuFqezFOaS4xw6bCfZo6/KsErie6Jo8mnWenJXU=,iv:MNUsJj4rFtB+ow0DI2VNw3GNWh8s9/b3EmMWhHhhk58=,tag:AMKibjCefa+0P1OJSvuFiw==,type:str] + lastmodified: "2026-02-01T15:46:05Z" + mac: ENC[AES256_GCM,data:RFrfcBBUIKaB1ALiMP0OO1tUTu457FxMqVL4vYkLPrLnMhcgCN/oyTp6mxVNxzMMr0gH0wLUy5iZao9Qjjy8MvmPuD9TxXwZXtXwb2dnRK6SzzGHNYJ2glV9Pktp7s1seeg9uImMExp8kHjs/j9mMNZFz05CGOjYU25B7I7Go6I=,iv:Uw4u+sOIZ0he3r16peODlkNd+oDFexlCdNUUIEQNRgY=,tag:uG89R6DqqScbalEJQmhumw==,type:str] encrypted_regex: ^(spec)$ version: 3.11.0 diff --git a/components/networking/configs/base/metal-lb/ip-pool.yaml b/components/networking/configs/base/metal-lb/ip-pool.yaml index 4298f39..bc11fc9 100644 --- a/components/networking/configs/base/metal-lb/ip-pool.yaml +++ b/components/networking/configs/base/metal-lb/ip-pool.yaml @@ -5,20 +5,20 @@ metadata: namespace: metallb-system spec: addresses: - - ENC[AES256_GCM,data:tP4f/TFwbAcdAr2Gb+S4oKXvwKPJOYwIy5ve,iv:ouTd5THMWaVBkQJtNK7zRUupZu0jeQ66qblE9YRXnuU=,tag:xG7f0R0RPzYh04p18m+/FQ==,type:str] + - ENC[AES256_GCM,data:2JfDDPBooVrhzSfhmi3XbSX5S+7WharHng3z,iv:nVd3gY5hGufg9nC+NOEITuk/A51LSfVW3m17tKaaWdE=,tag:GR+//ceTKR4+DApaQokp+w==,type:str] sops: age: - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdDZzb3NRSlJPUW92dnZE - emUrUE1LYklYSUpGYVcycUZUaHZaKzNJRm1ZCkFLVjFtVmNFRVphTUFuYmVBWEth - U01YZ0laZmF5WHFiOXN1WlB5YmYyVGsKLS0tIEZNd2dmZTZ3a2NXS3haTnk0NlpS - N3lVSC9oKzN0eU9Fa0NDMTY2QTl2ckUKTFKY8eIXReEM+L/sE8Y+T7/vZQkaP2Rn - c8AAbozJRwuWNQ7yJu1Kva9mj8TNaHi+HrPTYnHAoSOQakoOVO7j6g== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCekpuOTNjSWVNcUozK01p + a2FOcHloaUV1c0RxRXBLS2hUcktQZFl0emg4CjlJcWh0NEdNQTV2eW4xbzNYMndt + U0dqRS9qcTFsV3dpY045OFhLcHZKQWMKLS0tIGJkVCtzak5mNktpUzV5aGovdEdK + K1d3MHlpb05LMkpDOXJMUVJ3aTNKdlUKUgpj2JO9yhoa3DONXp3891sIBW8pgOHD + +fFhYp4c0e6prTrt5Gy/sg/iz/Rw/iK5CM+g63bCDOZynpb5pN2R6Q== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-11-29T15:32:48Z" - mac: ENC[AES256_GCM,data:1L/aBWL8/lY4DpCBihvpw2Gb8mtMNvSCQKeH99yEVWtDcijtXeTcTOXQWNjclyNrM6ChceWJKdFoGTPR2RiSk4zthcqqUPMzypRGXKY/F82zFahaINrRzdAVx6il0GuPBeOhxdbIub0+gWFnHJCosBh4q+n/6/C8c7ekWP7b3CI=,iv:slTOpas98PPMR5PRyeLTh5PoAA7OAArVtTYQg0Rduj8=,tag:9ixYDvqfoMi9gPHOorgH5g==,type:str] + lastmodified: "2026-02-01T15:46:17Z" + mac: ENC[AES256_GCM,data:HAoc9WYqp8zuZWKPOPpw8VlR7/zA5ZYkbFBfeghYFlOWnv05EiBdICCb41VTnKyhjFz+Vaizv+DGxfhtrF1BK8Vvk1R8YGeSoAyCCgtnmYZVSzSZIgUeWcXchhQbBlY13drJq4q26arEmXr0u0Wb18dSn2TX8p4XAV6zKTBKbdU=,iv:e6cP6YDYaHrHK9RndftopffeMcsIsVC9eLEALT3FKwc=,tag:03wX0WC0VnQ/hVSp629FBw==,type:str] encrypted_regex: ^(spec)$ version: 3.11.0 --- @@ -29,19 +29,19 @@ metadata: namespace: metallb-system spec: ipAddressPools: - - ENC[AES256_GCM,data:e2KiGNLv2BY=,iv:kd6NWV8M3yuV8+NALCH6AQLBswxiigklY+SsRlL3m0A=,tag:eM9KMcehxPo7j7cdIUSmsA==,type:str] + - ENC[AES256_GCM,data:Zq/dneuU9TU=,iv:ndq1ZId44lKMM0miSjY3SxrcmGh5YsFydMNeCDY7mKs=,tag:hS+DeXKNJqSjX3bmdwzkKA==,type:str] sops: age: - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdDZzb3NRSlJPUW92dnZE - emUrUE1LYklYSUpGYVcycUZUaHZaKzNJRm1ZCkFLVjFtVmNFRVphTUFuYmVBWEth - U01YZ0laZmF5WHFiOXN1WlB5YmYyVGsKLS0tIEZNd2dmZTZ3a2NXS3haTnk0NlpS - N3lVSC9oKzN0eU9Fa0NDMTY2QTl2ckUKTFKY8eIXReEM+L/sE8Y+T7/vZQkaP2Rn - c8AAbozJRwuWNQ7yJu1Kva9mj8TNaHi+HrPTYnHAoSOQakoOVO7j6g== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCekpuOTNjSWVNcUozK01p + a2FOcHloaUV1c0RxRXBLS2hUcktQZFl0emg4CjlJcWh0NEdNQTV2eW4xbzNYMndt + U0dqRS9qcTFsV3dpY045OFhLcHZKQWMKLS0tIGJkVCtzak5mNktpUzV5aGovdEdK + K1d3MHlpb05LMkpDOXJMUVJ3aTNKdlUKUgpj2JO9yhoa3DONXp3891sIBW8pgOHD + +fFhYp4c0e6prTrt5Gy/sg/iz/Rw/iK5CM+g63bCDOZynpb5pN2R6Q== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-11-29T15:32:48Z" - mac: ENC[AES256_GCM,data:1L/aBWL8/lY4DpCBihvpw2Gb8mtMNvSCQKeH99yEVWtDcijtXeTcTOXQWNjclyNrM6ChceWJKdFoGTPR2RiSk4zthcqqUPMzypRGXKY/F82zFahaINrRzdAVx6il0GuPBeOhxdbIub0+gWFnHJCosBh4q+n/6/C8c7ekWP7b3CI=,iv:slTOpas98PPMR5PRyeLTh5PoAA7OAArVtTYQg0Rduj8=,tag:9ixYDvqfoMi9gPHOorgH5g==,type:str] + lastmodified: "2026-02-01T15:46:17Z" + mac: ENC[AES256_GCM,data:HAoc9WYqp8zuZWKPOPpw8VlR7/zA5ZYkbFBfeghYFlOWnv05EiBdICCb41VTnKyhjFz+Vaizv+DGxfhtrF1BK8Vvk1R8YGeSoAyCCgtnmYZVSzSZIgUeWcXchhQbBlY13drJq4q26arEmXr0u0Wb18dSn2TX8p4XAV6zKTBKbdU=,iv:e6cP6YDYaHrHK9RndftopffeMcsIsVC9eLEALT3FKwc=,tag:03wX0WC0VnQ/hVSp629FBw==,type:str] encrypted_regex: ^(spec)$ version: 3.11.0 diff --git a/components/networking/controllers/base/ingress-nginx/ingress-nginx.yaml b/components/networking/controllers/base/ingress-nginx/ingress-nginx.yaml index ffacf19..48682d9 100644 --- a/components/networking/controllers/base/ingress-nginx/ingress-nginx.yaml +++ b/components/networking/controllers/base/ingress-nginx/ingress-nginx.yaml @@ -24,3 +24,7 @@ spec: kind: HelmRepository name: ingress-nginx interval: 12h + values: + controller: + config: + strict-validate-path-type: "false" diff --git a/components/security/configs/base/.sops.yaml b/components/security/configs/base/.sops.yaml new file mode 100644 index 0000000..882aa93 --- /dev/null +++ b/components/security/configs/base/.sops.yaml @@ -0,0 +1,5 @@ +creation_rules: + - path_regex: cert-manager-issuers.yaml$ + unencrypted_regex: ^(apiVersion|metadata|kind|type)$ + age: + - age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq diff --git a/components/security/configs/base/cert-manager-issuers.yaml b/components/security/configs/base/cert-manager-issuers.yaml index b75383c..d7a19d2 100644 --- a/components/security/configs/base/cert-manager-issuers.yaml +++ b/components/security/configs/base/cert-manager-issuers.yaml @@ -1,31 +1,30 @@ ---- apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: letsencrypt-staging spec: acme: - email: ENC[AES256_GCM,data:n3PMXRaaOw3mHTE+,iv:AdKUp2cgIs6/4wM2n2WXI9xZ1dPzzrPQhtRgsOaI2Ug=,tag:x74U/+A85Z5v3N7zCEAdMw==,type:str] - server: ENC[AES256_GCM,data:LHJVbmwjg8iwAKE2yR46R/hivMKCvQGI8HHTnROjPMtUdpiMyoGXslJeck89/qVdW6hgTBGb,iv:8uCZu9xWblgu7sRWvVP1i6q+YRQFLHZffL/XJGCmcpg=,tag:PJdmgsDtwkK5CmA3r7AW5A==,type:str] + email: ENC[AES256_GCM,data:YqOjX7qe1wmEPl7c,iv:fjKZIy4P9LhOeQEa2jbzAX6FBqEPq3Cz0lz14h2jOyg=,tag:qdY9y8ouPl2AbHWkDWfbDA==,type:str] + server: ENC[AES256_GCM,data:LCgLx35YyViA47qKsY8q3+70jSRkMHfs7INxrzL19NPQ3ePGeeZiCAp789/6EOTxQRHJQDSS,iv:ooe5aF7rwdFsix3WSbcb2ZmkAE8boDC4FrYZ7lS3EY4=,tag:cIyWhlnHAXM40CiTwYLTwA==,type:str] privateKeySecretRef: - name: ENC[AES256_GCM,data:Vg4c9Mu5V159/QXz2I3qe45cTQ==,iv:aUvbj+Kx3VmDmxx+QWIjpfo3C4Nc08phZhQwWpfNE88=,tag:90ey7W5TL2G+hPtEG3THZw==,type:str] + name: ENC[AES256_GCM,data:S6lMfFyxX+OIwoIzLd31S0HUqg==,iv:jpBGHY8Fnko4gDrhemr8p+x3lFojd/DVGLrXPXUZkME=,tag:IyePts+acrcVAuNZwF9dEQ==,type:str] solvers: - http01: ingress: - class: ENC[AES256_GCM,data:zIu3D/s=,iv:+Uv62H9i0VGkSufnt3cjjX4VBvr6ONo6tvQzH6r8BxU=,tag:pY57Mbuyg/wwzCTkLoFx4A==,type:str] + class: ENC[AES256_GCM,data:scHkNT0=,iv:B9X58ltjN69bNQt4pW4MDCwwH3fEGQ6VoPTPcTZY528=,tag:RzCVgfJi/H8KbkV46WLIOw==,type:str] sops: age: - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxa1B0c2F2TG85RUZqVkRu - RmpYY1d4Rm01NlJPZlVHcDQ1cEl3ZzR3OENBClgzTXAwdDJuZTJ3dGF0N3hzVXJY - VkZEdENaMForSVFIbTg2YmVGelhBMncKLS0tIEJtTmFvKzNYRHEyZk94cGMrTnF6 - ZTVLMnBudHVqTzB4eUNrQXBid0c1SUEKEMhX2k0MNYt5rrgMRy3QTIOiIuP0lwJ7 - 2Pyg7kj2RTQu2plwRZBNzQ2kBfCBkx06MBaJASHHsBQIPUZhtMLelA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVRzFWM2g3bGE4Mkpqb280 + RWRucytlbmt6a0doZU1wditHRU81RFhjamdjCkt5UTBtY1pKQjRKN3lqOXlnR2d2 + S1RlTHQrOWFGMVZDcVpyRmZYbEFBcUUKLS0tIEJIVjVGUE81R0JJZ1lncGo1NEk0 + VS9IZ3VJQlVLNTJwOFNNKy9WZ2c4czgKysx7Jg41wa7VZumU10Xxt8mVTUcef5ya + h0Nuxr+3IOGlLvLy417ik6OpM8CqbMbAGWaLSN7YyS0tRIOAn88y/g== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-11-15T23:47:15Z" - mac: ENC[AES256_GCM,data:B1opGlOCwM0nCFRWLdpteNuCAb06emGf0I0KKOhlNh0u36DTr1aVRzGV57sJRi8b4rSwPBucP2WzIKFAHY5yKincGdHwPwQ40dun0TreaJrtXiJagz19n2nqc2vZfzlE9G8QdG6Bnos17UaB5b+I5dWYlz1XM8oYOk0pdzrCGas=,iv:fuC+7nKNxHfn+Q7psFQmweRIUFzIcBuZN3rESFmnJL0=,tag:IEVeHB4Kol9GNHJOolamRA==,type:str] + lastmodified: "2026-02-01T15:44:55Z" + mac: ENC[AES256_GCM,data:e9P3FsxkSJurAjgSbjqiIBEAKMUTNIvdO1mgs/pmPpLnTHRoO3dWWtksKRv2mk2SbFy9/QZ/iV5acBtCxobS+vQBIjOqQwY+0BpbcGTcrqEUPAQ7IylyNoJnTMXkalkRvkz4zdVPixT3Zu6jErcSjbG7uxBG1AHhIGPX3WBT0Sc=,iv:W77bGAYFfW9XkWlgY1QoG29o9t1y6pZ996pdj3VdsME=,tag:T1RHeXfZdkBlykEWBEGZcA==,type:str] unencrypted_regex: ^(apiVersion|metadata|kind|type)$ version: 3.11.0 --- @@ -35,26 +34,26 @@ metadata: name: letsencrypt-prod spec: acme: - email: ENC[AES256_GCM,data:WROzrrll22ZOAA4i,iv:6c6oni+U4kJO7wKSPVmnkvIyesYR/vYvK0qTY/9RslQ=,tag:d4thMfoyWRU8kPOCaptTng==,type:str] - server: ENC[AES256_GCM,data:hr4tgxj0GJM9oKaMaUjqUBdWByhOwYAQaavPiIYO/vVthmTTG6BY5/5iWa/xMA==,iv:hkuwiVGelzxSeIEBHNpe1tFQm1LjpiQIPfC2hliMQLg=,tag:b9sN3ffRKq9/y+QuBkl0og==,type:str] + email: ENC[AES256_GCM,data:Dh5rc5Wak2MnQqR7,iv:uLmnMlYhjg1X91vwfIHdubVV61u/3tQGKaquIEG2p1k=,tag:vLEWQ6pP6goAwKE5R06uqg==,type:str] + server: ENC[AES256_GCM,data:gMaHtIORxKiv6WuLDygFvr8GhMjbqW6NWqWZSTCLoSi6cQaULD3/j1l30A9IPQ==,iv:mPOqGFikZGsqT6widt0EIc3KXreZXApuZtdjXBK7HuE=,tag:iJLVIOiOd7iwIyjDIRa1vA==,type:str] privateKeySecretRef: - name: ENC[AES256_GCM,data:6euJ7/Fiu/4DcLY0CK4f3g==,iv:9hLzhVY7/3uWXKrfgvXAOXudgGMc11JiDFuDD297WvY=,tag:ujjexmTBX7PtClg3iGsaCw==,type:str] + name: ENC[AES256_GCM,data:ece7iyTmT7hq5+x1bN225g==,iv:xV0B2Q4ZOwl2itYAtenk/P+9LtJNV2ojuUSXp388Uc0=,tag:uEmv9aKXGTpjr2+HvDgNpA==,type:str] solvers: - http01: ingress: - class: ENC[AES256_GCM,data:6xOo5yo=,iv:g1GO+PME54KZNzrf1mZC+0G8aw+XJ1CEw+i8NakqVPM=,tag:NaIyYrnJOMPsLdoNBCqMFQ==,type:str] + class: ENC[AES256_GCM,data:HIwSVYg=,iv:suD5+sQF4uOsWyr/C7RaG+WXuFf38kh2XHKulAxbcPU=,tag:wgT4E5/2Zpn1fETnu0zWpw==,type:str] sops: age: - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtSGhmM2F4Y0VSRzhWSWRX - cU95OGFNRUxNM1FucTBVOFlpUHdBbFIwSWs0ClZvblN0OGtSbWdSZ0RUTVZHV3FK - QW9mck9TOWt4ejdiT0ZHak9BdWlnemMKLS0tIHpNNUh3b0NFNlBQckZQZzc4cVgx - ais3c3orMDcxbjlIUnZlbEZyVVZUTTQKbOMIUUOKX4b3qDsQhrkqWpsuJcSISc9R - Zg3Y5Ph5iJxrxmftDA4rxl0WFfGhI67JCTKPDpN0Dzfm663eMnKe1g== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVRzFWM2g3bGE4Mkpqb280 + RWRucytlbmt6a0doZU1wditHRU81RFhjamdjCkt5UTBtY1pKQjRKN3lqOXlnR2d2 + S1RlTHQrOWFGMVZDcVpyRmZYbEFBcUUKLS0tIEJIVjVGUE81R0JJZ1lncGo1NEk0 + VS9IZ3VJQlVLNTJwOFNNKy9WZ2c4czgKysx7Jg41wa7VZumU10Xxt8mVTUcef5ya + h0Nuxr+3IOGlLvLy417ik6OpM8CqbMbAGWaLSN7YyS0tRIOAn88y/g== -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-11-15T23:47:15Z" - mac: ENC[AES256_GCM,data:pUXu12zIDvUG1+Qfu2gvYmnLfSMNAl3DU4Z1ZPIYVBg0XX6btEyO8o9TXssoG6efIH+FrMkNVj41BMIdJnp12zcjMyUcD9GKvlJIYQla59uy/XBVArgvgYF8iBaz6PfzTFVYPUoP2WPi7Q9L3w12jsw1wRyEpYshAFtVJxtvhCg=,iv:o9oatVlXBl682FYCnFbqcNxQ0sKLlj2qI4m1k1seVKE=,tag:t46aEUU7RWHA/vPTFPinew==,type:str] + lastmodified: "2026-02-01T15:44:55Z" + mac: ENC[AES256_GCM,data:e9P3FsxkSJurAjgSbjqiIBEAKMUTNIvdO1mgs/pmPpLnTHRoO3dWWtksKRv2mk2SbFy9/QZ/iV5acBtCxobS+vQBIjOqQwY+0BpbcGTcrqEUPAQ7IylyNoJnTMXkalkRvkz4zdVPixT3Zu6jErcSjbG7uxBG1AHhIGPX3WBT0Sc=,iv:W77bGAYFfW9XkWlgY1QoG29o9t1y6pZ996pdj3VdsME=,tag:T1RHeXfZdkBlykEWBEGZcA==,type:str] unencrypted_regex: ^(apiVersion|metadata|kind|type)$ version: 3.11.0 diff --git a/components/storage/controllers/dev-arm64/nfs/nfs-config.yaml b/components/storage/controllers/dev-arm64/nfs/nfs-config.yaml index 7b084f6..074f41f 100644 --- a/components/storage/controllers/dev-arm64/nfs/nfs-config.yaml +++ b/components/storage/controllers/dev-arm64/nfs/nfs-config.yaml @@ -1,18 +1,3 @@ nfs: - path: ENC[AES256_GCM,data:8HEV6/qPUHdwAnNkzXUjBnQ3Xf2Ea3kQ7t+Gu5FoiA==,iv:CvoDqqPrut7OqEEMLDXh5X9jW5aaKK7Y3gpGm8nTta8=,tag:SG5rN+orDcGvvj+vCwPVNA==,type:str] - server: ENC[AES256_GCM,data:1CFxEkbv+LEICGo=,iv:6VKteyWM/ynkN5eiYvAhISBY9RTRo7UsBu2K6K7QI1Y=,tag:xXw4mqi4bM6rzWeN0yJbWA==,type:str] -sops: - age: - - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0WEFFZkVVbzlTeGhueVlR - MjQ4QlJEVVFSWVgwTE5PamE4bEp1WXFaWVhzCmhBaEp2WVJmQzI0K08zN2drSUlI - VVd2ekJSZFozcFJERmRMWXFkWVZDbG8KLS0tIGZzWTRtNXFaeGFPMS9zaURaWDQ3 - L2YzbG1yT1p2dnl5V3d0bVJRZ205ZjQKnj5uH/35GJl6y3jrAW/f6XjW29fFn2TS - lWyX4RESe3x+hQbx53PUz9Exqj2UPG9IXUzLxca4r5N7Y1ScbkXsPQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-12-06T14:55:37Z" - mac: ENC[AES256_GCM,data:xStfwYj3KJl/PcNhgz1JI/ilnEd1FPewWMcf8Tyt1yQfd0x9cbnCfoPujie1tEqoPHXIMNvyrRXt4R+CwhVcHnuH72AFiwXdF0mynOQbkZh5gxYkKSThqvL4vQn3jPI4/dWnfbB/K51x2gcj5pVv7IClrBR5tvvYRAWS8HV2924=,iv:/j38bjZA0H5p2/TEgbOB03/OhZrBn8szahlf90j24Y8=,tag:MPkMCYrKKCH7fU/WnQgjPw==,type:str] - encrypted_regex: ^(nfs)$ - version: 3.11.0 + path: /mnt/kingston-ssd-nfs/dev-arm64 + server: 192.168.0.4