Fixed issue with cert-manager and nginx path requirements

This commit is contained in:
V
2026-02-01 15:47:47 +00:00
parent 0786a8d75b
commit e363815c6d
7 changed files with 75 additions and 82 deletions
@@ -4,21 +4,21 @@ metadata:
name: 1st-pool
spec:
blocks:
- start: ENC[AES256_GCM,data:AtRtTh+2KLJl1we+,iv:kGE5B2p4qGaYBQw/1xt4Zhlk7HuEFLHJnZuEMlYiO5E=,tag:qRgE3tr9tSPDFQnNmYldyA==,type:str]
stop: ENC[AES256_GCM,data:CAXUaHPDWoR/SwgV,iv:BqOGR7A2qZSaW0oAJTf5BGRjsRPcoWA0AKCIgas1UUY=,tag:Bw9gv0UtapnJuC3gAq7vkg==,type:str]
- start: ENC[AES256_GCM,data:26y0zfU3PAIY3X56,iv:bZhfz8YbxzOdRlYyo8djYhAbLVT4tZr86sch5LuUwS8=,tag:qd09uoW/55qdory1H9JqMw==,type:str]
stop: ENC[AES256_GCM,data:1ncnUkw+V2sqiJXt,iv:RT9RCMXD5fWn9XAaHA2XTsdYcd0E2x9R8X3dgr3n6cI=,tag:ljeCi0OHNIbYkNJinJQ/Og==,type:str]
sops:
age:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAveUREcXUrYjdwSnlqczI5
cUlyY3duYnpmNGRpcmh5b240ZkxYa1c5RlNZCmpCSmNESTJQRjBVTXROWkVJdkUz
Q2NUWnErSWVqeko2ZFVuQUN1ZERhZTAKLS0tIHdDTDVxSmtMWmsvM1crZ0Q4RlU0
NS9qUndWR1BuakR5VVR1WVZ5akNmQlEK2yBGVlbApSLVeCvdqENmrY4ERvQ/ehGF
kAsWSpf0evesxnStkDnyJEII3ZK3YT8wuPTvjs05LwXYqCqA00XCSg==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNdC9kNThXR1pYNXdndSsr
amVxdEZYQjV6WjV6Q01lWHVlMUtUVjRQMGhBClRCK1ljaDFiQnhacXJ1RXIrUlVY
enJ5T0taQTdDSkRqaGF6K0p3NlI1RGsKLS0tIEUzUVdtV2orek9OUVFSbzltajMv
UFFyMUpQREhSbTZEYWtUa0M1Mkk3WE0KlQrgJjFa7z3WkRfiQGQLwuD9vh7vqsAR
wLGPL4Xmz5MTL6/FScij3lZJBlm+4Tn2/VLznuJATIT+rgD9V56IRQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-11-29T21:18:31Z"
mac: ENC[AES256_GCM,data:GMS2NzcIu9On1FspEiUygWgnTTv1maghUHgWNnJ5OsIyhpNEuTU8+0zcn/B4gw3Ve7aDc+BxBqlmWo3xLIMd/OVYUUfN7PULWzawcJ5S3d4m/8Gfc9Z637bRgszK95zy6FJgIuFqezFOaS4xw6bCfZo6/KsErie6Jo8mnWenJXU=,iv:MNUsJj4rFtB+ow0DI2VNw3GNWh8s9/b3EmMWhHhhk58=,tag:AMKibjCefa+0P1OJSvuFiw==,type:str]
lastmodified: "2026-02-01T15:46:05Z"
mac: ENC[AES256_GCM,data:RFrfcBBUIKaB1ALiMP0OO1tUTu457FxMqVL4vYkLPrLnMhcgCN/oyTp6mxVNxzMMr0gH0wLUy5iZao9Qjjy8MvmPuD9TxXwZXtXwb2dnRK6SzzGHNYJ2glV9Pktp7s1seeg9uImMExp8kHjs/j9mMNZFz05CGOjYU25B7I7Go6I=,iv:Uw4u+sOIZ0he3r16peODlkNd+oDFexlCdNUUIEQNRgY=,tag:uG89R6DqqScbalEJQmhumw==,type:str]
encrypted_regex: ^(spec)$
version: 3.11.0
---
@@ -28,20 +28,20 @@ metadata:
name: default-l2-announcement-policy
namespace: kube-system
spec:
externalIPs: ENC[AES256_GCM,data:uOu8sw==,iv:TbIpLCquwJyXqA/rWVmci28pOIpxlooMwUdQvdkwpW4=,tag:0H2MDoglCc4kc+2YFsrViw==,type:bool]
loadBalancerIPs: ENC[AES256_GCM,data:+0SbWA==,iv:IC/dkCV/Oo9n4WMehKE75g1rpZvZ2RwTamueKPYyPiY=,tag:lhrXx2Io0Td8xzfVuoO98g==,type:bool]
externalIPs: ENC[AES256_GCM,data:UbMC+w==,iv:JcLNojC5qSRmDQgDtlWSMCl2KQCSASxtOb7+ZapKjY4=,tag:SpoUA20u3MszDUj79tUXqw==,type:bool]
loadBalancerIPs: ENC[AES256_GCM,data:ypiEtQ==,iv:CZna6f6TeW1W8kjDQFE5lYBMAam2n58iNyByMnUQu10=,tag:w2AVMVc7bxWU3W3g7oHO/w==,type:bool]
sops:
age:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAveUREcXUrYjdwSnlqczI5
cUlyY3duYnpmNGRpcmh5b240ZkxYa1c5RlNZCmpCSmNESTJQRjBVTXROWkVJdkUz
Q2NUWnErSWVqeko2ZFVuQUN1ZERhZTAKLS0tIHdDTDVxSmtMWmsvM1crZ0Q4RlU0
NS9qUndWR1BuakR5VVR1WVZ5akNmQlEK2yBGVlbApSLVeCvdqENmrY4ERvQ/ehGF
kAsWSpf0evesxnStkDnyJEII3ZK3YT8wuPTvjs05LwXYqCqA00XCSg==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNdC9kNThXR1pYNXdndSsr
amVxdEZYQjV6WjV6Q01lWHVlMUtUVjRQMGhBClRCK1ljaDFiQnhacXJ1RXIrUlVY
enJ5T0taQTdDSkRqaGF6K0p3NlI1RGsKLS0tIEUzUVdtV2orek9OUVFSbzltajMv
UFFyMUpQREhSbTZEYWtUa0M1Mkk3WE0KlQrgJjFa7z3WkRfiQGQLwuD9vh7vqsAR
wLGPL4Xmz5MTL6/FScij3lZJBlm+4Tn2/VLznuJATIT+rgD9V56IRQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-11-29T21:18:31Z"
mac: ENC[AES256_GCM,data:GMS2NzcIu9On1FspEiUygWgnTTv1maghUHgWNnJ5OsIyhpNEuTU8+0zcn/B4gw3Ve7aDc+BxBqlmWo3xLIMd/OVYUUfN7PULWzawcJ5S3d4m/8Gfc9Z637bRgszK95zy6FJgIuFqezFOaS4xw6bCfZo6/KsErie6Jo8mnWenJXU=,iv:MNUsJj4rFtB+ow0DI2VNw3GNWh8s9/b3EmMWhHhhk58=,tag:AMKibjCefa+0P1OJSvuFiw==,type:str]
lastmodified: "2026-02-01T15:46:05Z"
mac: ENC[AES256_GCM,data:RFrfcBBUIKaB1ALiMP0OO1tUTu457FxMqVL4vYkLPrLnMhcgCN/oyTp6mxVNxzMMr0gH0wLUy5iZao9Qjjy8MvmPuD9TxXwZXtXwb2dnRK6SzzGHNYJ2glV9Pktp7s1seeg9uImMExp8kHjs/j9mMNZFz05CGOjYU25B7I7Go6I=,iv:Uw4u+sOIZ0he3r16peODlkNd+oDFexlCdNUUIEQNRgY=,tag:uG89R6DqqScbalEJQmhumw==,type:str]
encrypted_regex: ^(spec)$
version: 3.11.0
@@ -5,20 +5,20 @@ metadata:
namespace: metallb-system
spec:
addresses:
- ENC[AES256_GCM,data:tP4f/TFwbAcdAr2Gb+S4oKXvwKPJOYwIy5ve,iv:ouTd5THMWaVBkQJtNK7zRUupZu0jeQ66qblE9YRXnuU=,tag:xG7f0R0RPzYh04p18m+/FQ==,type:str]
- ENC[AES256_GCM,data:2JfDDPBooVrhzSfhmi3XbSX5S+7WharHng3z,iv:nVd3gY5hGufg9nC+NOEITuk/A51LSfVW3m17tKaaWdE=,tag:GR+//ceTKR4+DApaQokp+w==,type:str]
sops:
age:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdDZzb3NRSlJPUW92dnZE
emUrUE1LYklYSUpGYVcycUZUaHZaKzNJRm1ZCkFLVjFtVmNFRVphTUFuYmVBWEth
U01YZ0laZmF5WHFiOXN1WlB5YmYyVGsKLS0tIEZNd2dmZTZ3a2NXS3haTnk0NlpS
N3lVSC9oKzN0eU9Fa0NDMTY2QTl2ckUKTFKY8eIXReEM+L/sE8Y+T7/vZQkaP2Rn
c8AAbozJRwuWNQ7yJu1Kva9mj8TNaHi+HrPTYnHAoSOQakoOVO7j6g==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCekpuOTNjSWVNcUozK01p
a2FOcHloaUV1c0RxRXBLS2hUcktQZFl0emg4CjlJcWh0NEdNQTV2eW4xbzNYMndt
U0dqRS9qcTFsV3dpY045OFhLcHZKQWMKLS0tIGJkVCtzak5mNktpUzV5aGovdEdK
K1d3MHlpb05LMkpDOXJMUVJ3aTNKdlUKUgpj2JO9yhoa3DONXp3891sIBW8pgOHD
+fFhYp4c0e6prTrt5Gy/sg/iz/Rw/iK5CM+g63bCDOZynpb5pN2R6Q==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-11-29T15:32:48Z"
mac: ENC[AES256_GCM,data:1L/aBWL8/lY4DpCBihvpw2Gb8mtMNvSCQKeH99yEVWtDcijtXeTcTOXQWNjclyNrM6ChceWJKdFoGTPR2RiSk4zthcqqUPMzypRGXKY/F82zFahaINrRzdAVx6il0GuPBeOhxdbIub0+gWFnHJCosBh4q+n/6/C8c7ekWP7b3CI=,iv:slTOpas98PPMR5PRyeLTh5PoAA7OAArVtTYQg0Rduj8=,tag:9ixYDvqfoMi9gPHOorgH5g==,type:str]
lastmodified: "2026-02-01T15:46:17Z"
mac: ENC[AES256_GCM,data:HAoc9WYqp8zuZWKPOPpw8VlR7/zA5ZYkbFBfeghYFlOWnv05EiBdICCb41VTnKyhjFz+Vaizv+DGxfhtrF1BK8Vvk1R8YGeSoAyCCgtnmYZVSzSZIgUeWcXchhQbBlY13drJq4q26arEmXr0u0Wb18dSn2TX8p4XAV6zKTBKbdU=,iv:e6cP6YDYaHrHK9RndftopffeMcsIsVC9eLEALT3FKwc=,tag:03wX0WC0VnQ/hVSp629FBw==,type:str]
encrypted_regex: ^(spec)$
version: 3.11.0
---
@@ -29,19 +29,19 @@ metadata:
namespace: metallb-system
spec:
ipAddressPools:
- ENC[AES256_GCM,data:e2KiGNLv2BY=,iv:kd6NWV8M3yuV8+NALCH6AQLBswxiigklY+SsRlL3m0A=,tag:eM9KMcehxPo7j7cdIUSmsA==,type:str]
- ENC[AES256_GCM,data:Zq/dneuU9TU=,iv:ndq1ZId44lKMM0miSjY3SxrcmGh5YsFydMNeCDY7mKs=,tag:hS+DeXKNJqSjX3bmdwzkKA==,type:str]
sops:
age:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBdDZzb3NRSlJPUW92dnZE
emUrUE1LYklYSUpGYVcycUZUaHZaKzNJRm1ZCkFLVjFtVmNFRVphTUFuYmVBWEth
U01YZ0laZmF5WHFiOXN1WlB5YmYyVGsKLS0tIEZNd2dmZTZ3a2NXS3haTnk0NlpS
N3lVSC9oKzN0eU9Fa0NDMTY2QTl2ckUKTFKY8eIXReEM+L/sE8Y+T7/vZQkaP2Rn
c8AAbozJRwuWNQ7yJu1Kva9mj8TNaHi+HrPTYnHAoSOQakoOVO7j6g==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCekpuOTNjSWVNcUozK01p
a2FOcHloaUV1c0RxRXBLS2hUcktQZFl0emg4CjlJcWh0NEdNQTV2eW4xbzNYMndt
U0dqRS9qcTFsV3dpY045OFhLcHZKQWMKLS0tIGJkVCtzak5mNktpUzV5aGovdEdK
K1d3MHlpb05LMkpDOXJMUVJ3aTNKdlUKUgpj2JO9yhoa3DONXp3891sIBW8pgOHD
+fFhYp4c0e6prTrt5Gy/sg/iz/Rw/iK5CM+g63bCDOZynpb5pN2R6Q==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-11-29T15:32:48Z"
mac: ENC[AES256_GCM,data:1L/aBWL8/lY4DpCBihvpw2Gb8mtMNvSCQKeH99yEVWtDcijtXeTcTOXQWNjclyNrM6ChceWJKdFoGTPR2RiSk4zthcqqUPMzypRGXKY/F82zFahaINrRzdAVx6il0GuPBeOhxdbIub0+gWFnHJCosBh4q+n/6/C8c7ekWP7b3CI=,iv:slTOpas98PPMR5PRyeLTh5PoAA7OAArVtTYQg0Rduj8=,tag:9ixYDvqfoMi9gPHOorgH5g==,type:str]
lastmodified: "2026-02-01T15:46:17Z"
mac: ENC[AES256_GCM,data:HAoc9WYqp8zuZWKPOPpw8VlR7/zA5ZYkbFBfeghYFlOWnv05EiBdICCb41VTnKyhjFz+Vaizv+DGxfhtrF1BK8Vvk1R8YGeSoAyCCgtnmYZVSzSZIgUeWcXchhQbBlY13drJq4q26arEmXr0u0Wb18dSn2TX8p4XAV6zKTBKbdU=,iv:e6cP6YDYaHrHK9RndftopffeMcsIsVC9eLEALT3FKwc=,tag:03wX0WC0VnQ/hVSp629FBw==,type:str]
encrypted_regex: ^(spec)$
version: 3.11.0