k8s-lab/k3s/rpi/home-stuff/home-assistant/home-assistant.complete.yaml

105 lines
6.8 KiB
YAML
Raw Normal View History

2025-06-21 20:36:29 +00:00
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: home-assistant-config-pvc
namespace: home-stuff
spec:
accessModes:
2025-11-15 23:49:48 +00:00
- ENC[AES256_GCM,data:4UeaEkNYxW3znjU1fA==,iv:7GbwofR0e1Neh5lQkZvlQHYckUWrVsA0EkuRxjp5sbs=,tag:/UfJPQzJ85+DpnsGud4eqA==,type:str]
storageClassName: ENC[AES256_GCM,data:4URsh/LMGUaREA==,iv:lIDaODOAHidiK9yrlGW7lnDIOKn2/qemFCmLmQITuXo=,tag:jMbPySYikh6fobAx3f1YVA==,type:str]
2025-06-21 20:36:29 +00:00
resources:
requests:
2025-11-15 23:49:48 +00:00
storage: ENC[AES256_GCM,data:pBba,iv:lkkJdIznI31pEIXd9uiUWM6dY8j/LhYeUWe/LOcTw58=,tag:4S0U3Bje4Q+pPN2hHU5vmw==,type:str]
2025-06-21 20:36:29 +00:00
sops:
age:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
2025-11-15 23:49:48 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArYkNlSHM1VjVvQ0NhdFli
MTlsTXdGZVEzY1VqODkxOEE4OG1WU1VHVG1nCllBMTNBUjZtUW82RUcxL2R5bGFs
bzE3V2NweGlFUi95QkhaWGFXRmRPRXMKLS0tIFQxZUx6NVordzFGRGNBbFhkT3pQ
WWZnYkVSb2dpaGxMMU1lZURkTDk0QmsKjfXKd/3EjswXryHn7I8LM8t4yYqw/29Y
UkLNa8YH3uFD7gH4jjmNaSidXrFe7wuVFg27ZHuZZ8NexUKerTSEJg==
2025-06-21 20:36:29 +00:00
-----END AGE ENCRYPTED FILE-----
2025-11-15 23:49:48 +00:00
lastmodified: "2025-11-15T23:47:14Z"
mac: ENC[AES256_GCM,data:NhcmLMXvjemei7ERdjc2U4T0Zu1ugBzGqA3AMPJRWL44ah754OuRxdkfxc68y41oLG944McQNN+KHIR0ce92e9ZghZ3EVT0655JIyY6ZhDeYZsjPNwZKxNs9a6MBCbbBWwU9kZ2mIlyllj0Dzdu4NBA2Dve1atofETMmpM+eQBU=,iv:bTjC3TFChINMFpHLP8+7zVE1oYmldRYiLKLvwA6HWHU=,tag:9LQB9eB7cIYkxjoP1h4PYg==,type:str]
2025-06-21 20:36:29 +00:00
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
2025-11-15 23:49:48 +00:00
version: 3.11.0
2025-06-21 20:36:29 +00:00
---
apiVersion: v1
kind: Service
metadata:
name: home-assistant-svc
namespace: home-stuff
spec:
selector:
2025-11-15 23:49:48 +00:00
app: ENC[AES256_GCM,data:sWs9xn1swpMRjYNQp/Y=,iv:cZElYRBBMXcTQEUTRcMdyyPFwSA5X6tuQhjbl7xhyi4=,tag:kWJRXluOMpAcWeWPnhapbA==,type:str]
2025-06-21 20:36:29 +00:00
ports:
2025-11-15 23:49:48 +00:00
- port: ENC[AES256_GCM,data:DU+r,iv:T1PAotuerGQ6isK7azf/1NSKtXQG4ICkku0d3W8tGXM=,tag:XwEqVF5GzX86brTEp4eB0Q==,type:int]
protocol: ENC[AES256_GCM,data:CBcn,iv:bskEjJyVCGLdGhlkphhan1+HvY5tXxskwHgzPyk3Maw=,tag:X0u+EDev67k3aDK1Y9d2NQ==,type:str]
targetPort: ENC[AES256_GCM,data:1mox4g==,iv:Sqwq1Menv2X3SXABP6eHDDChll9aXAB/ZG2/RLVehZc=,tag:bhDcpnGMGHDPfqe1bsZkHg==,type:int]
2025-06-21 20:36:29 +00:00
type: ClusterIP
sops:
age:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
2025-11-15 23:49:48 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArYkNlSHM1VjVvQ0NhdFli
MTlsTXdGZVEzY1VqODkxOEE4OG1WU1VHVG1nCllBMTNBUjZtUW82RUcxL2R5bGFs
bzE3V2NweGlFUi95QkhaWGFXRmRPRXMKLS0tIFQxZUx6NVordzFGRGNBbFhkT3pQ
WWZnYkVSb2dpaGxMMU1lZURkTDk0QmsKjfXKd/3EjswXryHn7I8LM8t4yYqw/29Y
UkLNa8YH3uFD7gH4jjmNaSidXrFe7wuVFg27ZHuZZ8NexUKerTSEJg==
2025-06-21 20:36:29 +00:00
-----END AGE ENCRYPTED FILE-----
2025-11-15 23:49:48 +00:00
lastmodified: "2025-11-15T23:47:14Z"
mac: ENC[AES256_GCM,data:NhcmLMXvjemei7ERdjc2U4T0Zu1ugBzGqA3AMPJRWL44ah754OuRxdkfxc68y41oLG944McQNN+KHIR0ce92e9ZghZ3EVT0655JIyY6ZhDeYZsjPNwZKxNs9a6MBCbbBWwU9kZ2mIlyllj0Dzdu4NBA2Dve1atofETMmpM+eQBU=,iv:bTjC3TFChINMFpHLP8+7zVE1oYmldRYiLKLvwA6HWHU=,tag:9LQB9eB7cIYkxjoP1h4PYg==,type:str]
2025-06-21 20:36:29 +00:00
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
2025-11-15 23:49:48 +00:00
version: 3.11.0
2025-06-21 20:36:29 +00:00
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
namespace: home-stuff
name: gome-assistant-ingress
annotations:
# < use the nginx ingress controller
kubernetes.io/ingress.class: nginx
# < use letsencrypt-prod application in kubernetes to generate ssl certificate
cert-manager.io/cluster-issuer: letsencrypt-prod
spec:
tls:
- hosts:
2025-11-15 23:49:48 +00:00
- ENC[AES256_GCM,data:QPEY3GsvCUdy7DpfICHssmXDKiL89FOg8Q==,iv:zvJHMvMRsjcftqnm9ZVALiQFO1oN6DSxjfm5b1KZrBE=,tag:GmsoGX/ilreT3FMI4qOpqA==,type:comment]
- ENC[AES256_GCM,data:BBNvm7/6FvhAJXZR,iv:JtOeswLLHnTPruuywpg04HyHvjeg4ao6/aUmZ54Ragg=,tag:RHzr5wIiY0+nAQ22sWrQ+w==,type:str]
#ENC[AES256_GCM,data:G3LZykLxWOvpqX8YN3z3RM0s9q1b9lk6spoQlQAbW5w7AW27nE2db8GmyIFSv3WSHhU/SJdFadC8,iv:R+peTP5KapV6c1WJZa55MKfeGn7fbD1H37uMfsSRTuA=,tag:CUWPooI5C52FIJggTA9+9w==,type:comment]
secretName: ENC[AES256_GCM,data:NwrAqpeE,iv:jb38UWK68syzgqAvskPcufm/qmqzNOSTP4SZKpBMMIg=,tag:/3KYDbe92lkIimNerapu2g==,type:str]
2025-06-21 20:36:29 +00:00
rules:
2025-11-15 23:49:48 +00:00
- ENC[AES256_GCM,data:ot5sEes910iBRLXsZRGZJFKPTcMy30+yOw==,iv:ZaMZb57iIOGBDDK1I/EGoXF7CwUb1t9UztOckONgdOc=,tag:3z/cWnUtglp/dZr/hnj8Zw==,type:comment]
- host: ENC[AES256_GCM,data:dzIvv5E7AYTO2xhZ,iv:+Lkk/xtNLvH1rbsZ8c74AINFkViK8U3qCUt7WyRcIg0=,tag:U8fhga0dY5tdcezQG2fsfA==,type:str]
2025-06-21 20:36:29 +00:00
http:
paths:
2025-11-15 23:49:48 +00:00
- ENC[AES256_GCM,data:RQIm/nCJk9mBShwEGD9nXi50VSTAl6WIwRGuohXvjBcTrsGD6MjNi3HT26OT2aPleR5ABJ2zjFZ1f1yx5OaCw4883yPM,iv:+6oA3hz0h9+LS1OnP13oZz7tA+lbdptVZvVbXylW8js=,tag:mx89IkFXZWrhccXbAMKKJg==,type:comment]
- path: ENC[AES256_GCM,data:oQ==,iv:1sTX7yirbEER52bAPzVMVGPK+vgcdFw7tsKZil5yKrg=,tag:8jWh44f3HgLY1XIZP3V2EQ==,type:str]
pathType: ENC[AES256_GCM,data:knV/7Cj8,iv:ewBha/7HnOGRRahQT+HYAtmiTXchQfJTJMuOt8nQSEY=,tag:eDFZdplQ/NjvivWJ15pI9w==,type:str]
2025-06-21 20:36:29 +00:00
backend:
service:
2025-11-15 23:49:48 +00:00
#ENC[AES256_GCM,data:C+FMIOmS1c5YIq4BbWefdp9pBx/eUPw4onsusXckdNy9It2wUJq1FO42wjzIzRc+1cWge2tNvC8mY3AtNhLy,iv:lUzCCL5TB6HWdkoam5B3LVu2+a8pSYp0jw/aFKAquak=,tag:/0hheWOPbacrB9Isug0jkw==,type:comment]
name: ENC[AES256_GCM,data:vYE0owdRL1CKzUjoJ4387N4a,iv:dUATuHUg1pCSfFLpE1yrtucXRwsgmNYAEfz2PlZKcoo=,tag:qUqcr5dokn0k/FaNbM0f8A==,type:str]
2025-06-21 20:36:29 +00:00
port:
2025-11-15 23:49:48 +00:00
#ENC[AES256_GCM,data:2TGp6yOJGZZWubg+3ZMXdrcpS+cNw2lvXHOyaO2E53Y4BNaFyXdtgrYgyxhxkTsMllAoi8g24iZsPDhK,iv:8S0rO7prFdS/kzCjzv7VOKbviCU6s676OsBB1wOpOyc=,tag:QmyNjG1ez237ZMnaWpyg9Q==,type:comment]
number: ENC[AES256_GCM,data:BCjk,iv:cdf3Qk6UNxnFdvtPNYogaeXhTLarHSV7MeH5RyqIZW0=,tag:jeEPPIrK/Gmmzm/aIptWDw==,type:int]
2025-06-21 20:36:29 +00:00
sops:
age:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
2025-11-15 23:49:48 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArYkNlSHM1VjVvQ0NhdFli
MTlsTXdGZVEzY1VqODkxOEE4OG1WU1VHVG1nCllBMTNBUjZtUW82RUcxL2R5bGFs
bzE3V2NweGlFUi95QkhaWGFXRmRPRXMKLS0tIFQxZUx6NVordzFGRGNBbFhkT3pQ
WWZnYkVSb2dpaGxMMU1lZURkTDk0QmsKjfXKd/3EjswXryHn7I8LM8t4yYqw/29Y
UkLNa8YH3uFD7gH4jjmNaSidXrFe7wuVFg27ZHuZZ8NexUKerTSEJg==
2025-06-21 20:36:29 +00:00
-----END AGE ENCRYPTED FILE-----
2025-11-15 23:49:48 +00:00
lastmodified: "2025-11-15T23:47:14Z"
mac: ENC[AES256_GCM,data:NhcmLMXvjemei7ERdjc2U4T0Zu1ugBzGqA3AMPJRWL44ah754OuRxdkfxc68y41oLG944McQNN+KHIR0ce92e9ZghZ3EVT0655JIyY6ZhDeYZsjPNwZKxNs9a6MBCbbBWwU9kZ2mIlyllj0Dzdu4NBA2Dve1atofETMmpM+eQBU=,iv:bTjC3TFChINMFpHLP8+7zVE1oYmldRYiLKLvwA6HWHU=,tag:9LQB9eB7cIYkxjoP1h4PYg==,type:str]
2025-06-21 20:36:29 +00:00
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
2025-11-15 23:49:48 +00:00
version: 3.11.0