Fresh repo - removed all old commits

2025-06-21 21:36:29 +01:00
commit 6fa64414f8
99 changed files with 35021 additions and 0 deletions
@@ -0,0 +1,19 @@
+Helm install:
+
+helm repo add portainer https://portainer.github.io/k8s/
+helm repo update
+
+helm install --create-namespace -n portainer portainer portainer/portainer
+
+Then create the service:
+
+kubectl apply -f portainer-service.yaml
+
+(Optional) Restart Portainer if it timed out before setting up initial account:
+
+kubectl get deployments -n portainer
+kubectl scale --replicas=0 deployment portainer -n portainer
+kubectl get deployments -n portainer
+kubectl scale --replicas=1 deployment portainer -n portainer
+
+Set up admin access by going to the URL referenced in the Service.
@@ -0,0 +1,36 @@
+apiVersion: v1
+kind: Pod
+metadata:
+    name: passreset
+    namespace: portainer
+spec:
+    volumes:
+        - name: ENC[AES256_GCM,data:iZ3pLQ==,iv:WZy9LoNRXhxhWrSamhv/qVIglwmReOB9qVPOEWQQ+3Y=,tag:fMfyt1xtfuBk+dOymo0IkQ==,type:str]
+          persistentVolumeClaim:
+            claimName: ENC[AES256_GCM,data:t/Qn/XyXo26Y,iv:KemBYop0KbJbp27c4Gi+U5d3EUi4Rgz826hBHWBGj/A=,tag:pb4SN99bhqs0iUfooTqbKA==,type:str]
+    containers:
+        - name: ENC[AES256_GCM,data:YrI9Z1t9h+S5,iv:jJFLChbCOWOArryDlrN8hdrv/VpQNsNZpY9FOM/rNlc=,tag:JGxjHKcCuldz6Cq1xkdbsw==,type:str]
+          image: ENC[AES256_GCM,data:EpcyH4RdcPR8Jojt6BzYfAdu1D5aUbBL/85thoSYFw==,iv:MbF9TGmyu8A17Hm3c1QaP555hVJrF2YdDlucHh75p+s=,tag:92cZ23WZMb0h5uI9QhJanA==,type:str]
+          volumeMounts:
+            - mountPath: ENC[AES256_GCM,data:SUo0x1Y=,iv:XDRL/3K9Fto8DhiR4+3H5v124x59cykC4BHPh16oF6s=,tag:xgVKDXmmdpScYVZGAokllw==,type:str]
+              name: ENC[AES256_GCM,data:9x2V+g==,iv:EFhCYphUxXveGQExpOQ/PBmm0hxfGmCzW3ZFTIBhq6c=,tag:EanYfK4qXmjsnVqkW14UjQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKSHQ0cGpDZlNaVDZ3NFZB
+            blZEVnM0cFVVaDNmWTVkcyswMXlGWmI1L1NjCnlLNDdwYVUzMW1zc05xRmgrUlFR
+            Y2lsandCSDM5S2NkNVJ0ZVZyS1J1NjQKLS0tIDFzOTRnM2NjdjlwL2MwSVRPTGZP
+            dDRabTlHdkNBQ0VEMjdZYUhMby9yUXMKaSLB8adhd4YF/alrRt6+hHSn2Vhl+0NF
+            wivSp+cjjCTBF3dP0NEM/ctjNY724WicMyzYFmEDgWrDNiyfXf/tBg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-06-21T20:34:11Z"
+    mac: ENC[AES256_GCM,data:GCznc9EoSB6dWTGCxvLsCuVy4I9BKynagh7XJ5aHMOtz8sE6fCZbb1hq8xB4ypCw+yD+ehHq9g4di78nB6xl7z5vou9CzNvZMmdAIRNNR6PResIro0F3Ae3s61b1o62XoGx46D7hUy0J6h/+D4zxdYmqMNRyNoB1QxhsOCA8mF8=,iv:IqK4uq3ENeDxcSNDfMxOakYBX9KrBJGjjuHNRx1sRTQ=,tag:pXJCc2xfbxXrXD3SHX/Qqw==,type:str]
+    pgp: []
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    version: 3.9.1
@@ -0,0 +1,37 @@
+apiVersion: v1
+kind: Service
+metadata:
+    name: portainer
+    namespace: portainer
+    annotations:
+        metallb.universe.tf/allow-shared-ip: internal
+spec:
+    selector:
+        app.kubernetes.io/name: ENC[AES256_GCM,data:FXIcD0k+sxK6,iv:0+jaErf7Jz0Epjl9aCDO2wbmhu0ldG9pjUDmwqLOI5Y=,tag:PYorIJhlWdsNSAwuEWY9Vw==,type:str]
+        app.kubernetes.io/instance: ENC[AES256_GCM,data:Ma1wqKdVv5en,iv:NaLoPa2jdNHKN1Wj+LYvLwq4c8A5sarQ5RgTX3i6Obw=,tag:uuvN4ffbiwwZkjfjpU0W5w==,type:str]
+    type: LoadBalancer
+    ports:
+        - protocol: ENC[AES256_GCM,data:9PnI,iv:th+YP1kkfBh7AaYyRsizUOptejqJUgaqmL51QRYFQwg=,tag:p7g//IopfRHFeQAgZ4L8fg==,type:str]
+          port: ENC[AES256_GCM,data:958LQA==,iv:sALn3NkGNiJLhP99EZ4/Z8TAF9xdOVNUAf7Wvritz5k=,tag:65Mu2g14Eji7/lpfie4QNA==,type:int]
+          targetPort: ENC[AES256_GCM,data:VV+rhQ==,iv:tzBjVcPxjWmnM6dSxdRrNAHH7Nj951j3Bv/mGRAb8o4=,tag:uuhDW1d5IwwC4UInHonNpw==,type:int]
+    loadBalancerIP: ENC[AES256_GCM,data:yWGBqCMDlfXxLmQG,iv:ynLGZxAy6fnpbDkOaoY5+/9n4iGKH0xik3taUq08b4c=,tag:GeZu1SGv04RKHx/UNWWDsQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsYWFqUm1icFlmY1ViUVFG
+            NUlVQ1hWeWp1TFBFYzBCWWNvQ3NXckJCR2gwCmFibldIRnlnaGpkMmpPSUhDeXJS
+            ZHRWbGtuZzJPZy9VRDdaaUttZWZxY0EKLS0tIExreGljWnBmV1lWWmVhM0hLRXgr
+            b25EY0tuL2c1bk5sbCs1RFFQaFJreUkKeclwMeRs5DJtxAB5zfEiPpMiHxYlljJr
+            intkycf5x+P7ND4FNKJNsR/H68sQVsrpQxDrAu4g4XtgCGt3TiJBNw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-06-21T20:34:11Z"
+    mac: ENC[AES256_GCM,data:bgy3ZP5uYQv7uTdZALJU0DyusLCuAK5Pe8BnzE0YUjN869YvatJ+syH/taMA4uHHnOr2E3MITwQjIlcV6Z2oBVYqcsmcHJ96NH3Wdz25Ep8bH2GNYqz0KZKht5IiayQCj/DgCuFAuTae7yV9bNye9IcVyQkBCLHkzIdDAQ86H94=,iv:oECX60m6LcXRMofcmVtzcDICZHNfxta5lSjINCzQThQ=,tag:BvN9HS6nND2RE9mivz0NwA==,type:str]
+    pgp: []
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    version: 3.9.1
@@ -0,0 +1,40 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+    name: portainer-ingress
+    namespace: portainer
+    annotations:
+        kubernetes.io/ingress.class: nginx
+        nginx.ingress.kubernetes.io/backend-protocol: HTTPS
+spec:
+    rules:
+        - host: ENC[AES256_GCM,data:JlWZROqVmSbS32V+hAmaU2U1ug==,iv:4Rs3e9llE7LgGwovDD7tnnIIQi3YT6m/UAeXPtqIwu4=,tag:H9+v141qEirsbNleCUqP+A==,type:str]
+          http:
+            paths:
+                - path: ENC[AES256_GCM,data:ow==,iv:fyqJV5GdIHno9QGpz550ryF0CH7wIdIvniMMyNTdavs=,tag:kVAqXcgquBP58ycutfZgZw==,type:str]
+                  pathType: ENC[AES256_GCM,data:h1W66Ofq,iv:dqCqaEGHwLx1+8joPj5Qd9f2vV6yhWqnEohpElEo0A8=,tag:ZuuWEzs0fl8CX0wtEstFwQ==,type:str]
+                  backend:
+                    service:
+                        name: ENC[AES256_GCM,data:r61rOOQSLfDS,iv:gr+2iEGNMXvOf0RamKfSnwWJu7xnADgMCplsG+RR5WI=,tag:9U/CI0jJS8GZ5jQHW4LR5w==,type:str]
+                        port:
+                            number: ENC[AES256_GCM,data:q4dH/w==,iv:Zzqep4scxTgnGROrJSNEzd28i97t7WmOa1WA899jmxE=,tag:+HwErEl/dYbvx1pIxHaz/Q==,type:int]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnbWlTRWdpVWppMzlmN2dj
+            L1VsQUpXVVlzTGFiTmdVdXp0bVFhNXFTRkEwCjdHR2ZMWTU1bEhBWGNNaTRkRVJO
+            RlR4YWNQMVdQNnJYZE4wd1BUbXYzZ1kKLS0tIEE5d0tlSjhmWVNZWHlsQkphU2d4
+            RWprZXlGY04zYk11d1FxL0MveUpXOVEKt8mIZNUrn64eKZRWJXj3OWoqjFIA9rTj
+            DLSXqJ54YL2HuueMdKd4s0dqmHsKvB/fPt/1hQhclhrsrJlE7/ws0g==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-06-21T20:34:11Z"
+    mac: ENC[AES256_GCM,data:nJRt/Ahb6aYg3WGUnDUz9E3YERX/j5unLZEftrK0g9Zf58UbNyabggpGCpCef2b8XnHFyEM8XZ/vmhzfJjwlvEBQuPtWiB9O8dr76+zmtMI1txQvp8ocJeZyf4fsZSgKsNXGnukmMPLqC+IytD5dsZTTQpGx2WlslC0MMuI+Tts=,iv:ZMPbQrJnfSSLLDfoCWN9IW4XIA8fenYq8oUDukA36+c=,tag:CUNWMFGlplnrsAb534iVqg==,type:str]
+    pgp: []
+    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
+    version: 3.9.1