Added monitoring with Prometheus Kube stack and instructions for setting it up with Helm; WIP - need to create targeted SOPS encrypt/decrypt scripts to prevent all files showing as modified in Git history when I decrypt/encrypt the entire directory

2025-06-29 22:34:46 +01:00
parent 71bd447b78
commit c130157f2f
72 changed files with 18264 additions and 13543 deletions
@@ -4,29 +4,29 @@ metadata:
    name: gitea-prod-tls
    namespace: dev-stuff
 spec:
-    secretName: ENC[AES256_GCM,data:dS+w4ooDrcGpnOx0sBU=,iv:iZbjKdLl8OcSadO0Olys3Prs1ytGWw7TkOVXq1G4LS0=,tag:ARhphYEO2wjevifNK1U8BQ==,type:str]
-    #ENC[AES256_GCM,data:lXhtjw==,iv:VHloUeqUqCH7mtloAmZl1cpucPYuSrfgCxzwuT21GyQ=,tag:h+UVdjW/r3+a7TVCMcB+xQ==,type:comment]
-    duration: ENC[AES256_GCM,data:tt90FuA=,iv:A9c0420URt7s2k/4wyCP1nVuDJnQS0eN/fkqjP8yCb0=,tag:Phhegf9nozaJyOI8YDqDFA==,type:str]
-    #ENC[AES256_GCM,data:xArqiw==,iv:AkOi5sG5Yb7TWT0y32mXDpDLNSLoMeMXvnzBEh7UFYU=,tag:HxQFa9pvMr74pDtwQBHR9A==,type:comment]
-    renewBefore: ENC[AES256_GCM,data:F79owg==,iv:/eREUTyyxgr4tocjpSofJ60a5vKlyXREIxvHtTz8bfI=,tag:22cYnqzQAfKvFYEBSNP5Aw==,type:str]
+    secretName: ENC[AES256_GCM,data:+4QtgtiOiSP09st4EFw=,iv:HmFfta7ZKYsULtXP5vC4kO016aOmXFq80na2FkSt2WE=,tag:m62nwedlDgHjBtXbOL7bAQ==,type:str]
+    #ENC[AES256_GCM,data:/1qpxA==,iv:Om14TDXSDUHBJfcbTCHH63/lzgZpFn/jIzVjMaEC9mM=,tag:JXIQqU3/VYUTnMvp5fH3cA==,type:comment]
+    duration: ENC[AES256_GCM,data:HgPJxzQ=,iv:bJke3yVNf3lMqxYahiifz/jmF8QUqtTR0xn0yo/1mHk=,tag:4JKfCWdQ0S0vA5K6V6/Q/g==,type:str]
+    #ENC[AES256_GCM,data:slS8cA==,iv:p/dfz19/b67hRTD5a/kVyIKt4Na59vKJK6NFRbJDxJY=,tag:9x8N8w4k2kF7thGdx3lTkw==,type:comment]
+    renewBefore: ENC[AES256_GCM,data:96xGcQ==,iv:rMbB9O//+34vOqv5eWoMXZyeheOKjytL7mNZbMKPH24=,tag:rQoGYfmO7z9vdNYgwu/Qfg==,type:str]
    subject:
        organizations:
-            - ENC[AES256_GCM,data:v6F/,iv:ZRg1IHap27Ck4ug0KCN66xn7MGBFdvMgiGXYdhKNW4A=,tag:CxV/17k1uELg6v7xHU6wIg==,type:str]
-    commonName: ENC[AES256_GCM,data:3DbN0c0iABYPAqbWZ59r/yEt3TyR3A==,iv:pZuatpCB1ijqroWaMSF18R25vuqz20AcdjrIMiBTZr4=,tag:NiwqCo4IbnEA3zVjQd08jQ==,type:str]
-    isCA: ENC[AES256_GCM,data:1i5xG4M=,iv:x/U0b9b9uSOq1Pd2LItZtRolMVjsAkl8DMyrAfwq6n0=,tag:JebbhZ+b+tVTN2Qo6Jf9Mw==,type:bool]
+            - ENC[AES256_GCM,data:C5PH,iv:sy5y4pd0ajAvBhcqeCmgRVy4gJtfpRSZGiF1aPNddHw=,tag:38Y9U6F2A8byu7yujFxF2w==,type:str]
+    commonName: ENC[AES256_GCM,data:Vd6cVaGvWRKZ08/PBaCcziPVGXdZAw==,iv:aPoq637ptX95n+eGeKGnTpmFIt5rS5nmvOncsfEo2yY=,tag:Hdi47pm0OzrMhc6QC80C4w==,type:str]
+    isCA: ENC[AES256_GCM,data:E2FQXVg=,iv:jnEQ2Jo3hHcUIzFd2f9D4iqRHJ6TTh2yNAQJCeexLoM=,tag:+sZFUslO5Pwzx/7XXYTRpQ==,type:bool]
    privateKey:
-        algorithm: ENC[AES256_GCM,data:4G/l,iv:q/4+iDN+okXfGuHXvejNLcly2lBmQeTt0d3Y4PL9ZWQ=,tag:fc7yKV09NCdsu9Jed/awPw==,type:str]
-        encoding: ENC[AES256_GCM,data:2Iye06I=,iv:sDDUNK2lSM0qXBKju18SfMKyJMh7cKe4CI51ciQwh2w=,tag:UqZvCddNAcGkdOS6w1YaQA==,type:str]
-        size: ENC[AES256_GCM,data:52frWw==,iv:k428VtLd1lhvw378NB8AXqtMrzY9sBeIcJx9vL1eQsQ=,tag:7SQEeDsjr7qAtqBjrklA1A==,type:int]
+        algorithm: ENC[AES256_GCM,data:lxTF,iv:eN6/4eytVBj3S/nj6SQ/NcgN6IGENDxwRc7taImQ6D0=,tag:ExaOC61b9ASbJ2siIA7s1g==,type:str]
+        encoding: ENC[AES256_GCM,data:obek4zQ=,iv:vIEZvPSASRC6x+wpz7SYdPjFGVOK0gK3r7FmD7n396A=,tag:r8N8ATEN52LDkDsCT2UFpQ==,type:str]
+        size: ENC[AES256_GCM,data:n7ivgw==,iv:lvhuXR9g2kKfQYo8kJL0grhovAqf7wVfDpnmqK/3z9s=,tag:zjDWfbRSzTganYejPSKc+g==,type:int]
    usages:
-        - ENC[AES256_GCM,data:l+EAeYD/Jf8R2FY=,iv:B1GNLNdFCjCEsGY/klD7haan4A9CsVj9V385mLvQJUU=,tag:U5FPawgT9itd6QhdlniwKA==,type:str]
-        - ENC[AES256_GCM,data:HQxpFnQUn+DwZ+o=,iv:csKom3ianFVmPU888qa9DpulvLb4TPoHIctpIVPEYuQ=,tag:qSz1HGkfr6ZGrZSLWz0duA==,type:str]
+        - ENC[AES256_GCM,data:REcpwMdnZwKlOBA=,iv:2gyEpBbjGUix6deHhiHHQvCxgbKQepBOU0nqP90mPcs=,tag:xeS9CRauTDS1eLdl3wlHwg==,type:str]
+        - ENC[AES256_GCM,data:erJAomqZ5WV+yaA=,iv:7fDHQzI0nmC4PgdK4IRXC9YnL+ecs0JWj2Fqv70WGfk=,tag:KAR/VLiHAGduCkborIldSg==,type:str]
    dnsNames:
-        - ENC[AES256_GCM,data:iFaX4SIRb/OipqCxIgM8Qp22PkfcxQ==,iv:UgaNvAex794L8UcOjsq0VtstiW8prsSH8ye/ajT6SUI=,tag:W7yG210UgEQQtSwda3Ca3w==,type:str]
+        - ENC[AES256_GCM,data:JNQqm4bPQn4ZLkQDZ7EJAfF+6maJ5g==,iv:SxamNaXe3HLBFMfkR+VbfNNchQUldGgkReqmPWQ/jqw=,tag:oPcODbehcSaXuLYP2Hkkig==,type:str]
    issuerRef:
-        name: ENC[AES256_GCM,data:51hitzJFeieA/SkZPE3bEA==,iv:WFTr30qEVCBU5XQNdyO+jxuQqiHNyIFwR5HxRjAOHOg=,tag:1dll1ACZoIcw75w2KCCs8Q==,type:str]
+        name: ENC[AES256_GCM,data:GXwZduN8ETIT0Sofe7JWNg==,iv:HzfrFm9wnhwhko7j3nB4JCGJU2Fq0Mw4Gy/2G3kG/tU=,tag:Mu67Sut7T0TvwhSOWDZ9fQ==,type:str]
        kind: ClusterIssuer
-        group: ENC[AES256_GCM,data:EgkY1oMj/XdYZe/G8Ld3,iv:w5YV7BHo1AXlReDzPIsFj0vWsGfoghKHrPyyTjqGSVY=,tag:Bcux2i3Rd//uPDMsicE3Vg==,type:str]
+        group: ENC[AES256_GCM,data:2dGNR+Bj7NjM8B7nR89j,iv:+w1xGzAaoSTUFTT8qzkW8CKwLhNHi0mgCRtsI/mVksg=,tag:rnPIzMgiRViX+NJthKgg5w==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -36,14 +36,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBia0QzczRwUmlrUWdhMXNE
-            NkNyNTRRVGhtQ3M2VDNtTHduWEhpOFlVdkIwCnpVS0lXMFhuL0RkMkVYdHU3eDY1
-            dTVncldweFE2NU5McTFoeXZiR0FWemcKLS0tIGxJUXpUZXk0S2xDV2Y0TEJWaWkv
-            bERQWlh6YkRFb2laYndreWFDTmRveXMKJrnHBUXDqSMvLJ46t6nu6EU0ktmz2LVD
-            k9/WCpXyYNzG8cxhVov71KBFDUj16PUIVwfVeph6m3g73KhpQa+6Rw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJY2NxZzRteTRZMktUL0Vl
+            U2dXNXY0TDMvVzl1eXBBOFd4QjVSY1pjZ0ZBClZqTkVmSEcydjJJek9yT1VSWGNR
+            RDdNWE1ycm9IcU9US051bElJUXZDNkEKLS0tIHkydEt4d013WnVYTW81T0VzeE5i
+            amlDQ09ERjYrTitJMkY0NUhwMG9kak0KMVIF+PCh74BNDPIJoraTqJCnzbezdO+n
+            arB6q2dHVUjUrXUMJgWGtMssLT7EmCS5eeUbTNdVrfXcEbPx9vgNxw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:10Z"
-    mac: ENC[AES256_GCM,data:YpWZwWSUbiMbFINrSuxBMZgUzyLJPSYWGojTXCtUmD8CG8TGMekbAGbIwDY40VL/lU8mTVKaZj7dpuNn7l+9cR3TYND1ap4iQFJ0JpZRLxWotYA0D9S6A+SuuJZ3tUBoh2grrrPrwt3+P3X2tI3K38tMS2ZD5sd6JwhHzv4KqeA=,iv:WHFiHXHRNSHJlLwdapxfD6frfVSyuecI2gqBFrHsC4I=,tag:6L/IJbttcVdSafYyevbKXQ==,type:str]
+    lastmodified: "2025-06-29T21:30:59Z"
+    mac: ENC[AES256_GCM,data:ILi7Y8PmwrC/KRcA/Cw8nMmsdfjHDF9L6F4Vj5smLqgBE0esdgvtGMxKUKZ+dqZUz+AU6gfgp8Bm5b0ubUNlrc4Xfqu3Xfby/MlwRZwGpLh85DANy4EEYLvuPo3ffR/Ha462GeBU91Lehku7LKt422MLRKaS3Girgws5VXBzXOQ=,iv:mNrNVeD9z5hDgSkdhZ7f+tc/kUL6ezT8cEog3mdnhJY=,tag:GPzyB7+hG/8tczaUY89yfg==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -54,12 +54,12 @@ metadata:
    name: gitea-pvc
    namespace: dev-stuff
 spec:
-    storageClassName: ENC[AES256_GCM,data:jw2Orac0SjJ0gw==,iv:HqGwokpwFDvi+gPUJFTCf1AdyKyxvPZ72p2U2Vp4/IM=,tag:I0E2/iwT2hNJ/e3LxXlUug==,type:str]
+    storageClassName: ENC[AES256_GCM,data:ayT6z+sbD4b1vA==,iv:R7mhvsFZ02m916Mp3/BmBvM/aY8KjLh6KWwKcl1TlXw=,tag:VsHitQOn/sQqjA1BiqORzA==,type:str]
    accessModes:
-        - ENC[AES256_GCM,data:WVLyW78tdKReUd8SjA==,iv:kQMEhaEVaac/zuSCW559D8FIv7jnsRejoe5h5RO5aVE=,tag:xsQfJZvkQTQbN3oVw2F/Tg==,type:str]
+        - ENC[AES256_GCM,data:rdWlRFKbIhf/NU6zZg==,iv:s7gHTCYTIK+EVaCFABBMrDlE0jtH7Ug5z60qtxLvdPw=,tag:XBm1RqQ39OJrpPI0Fx2E9w==,type:str]
    resources:
        requests:
-            storage: ENC[AES256_GCM,data:Iwrtjw==,iv:GA2nOL2IrhBLcqcnmxayvmIxVNIqMRKuWLHEJUHbmYA=,tag:mup3ZKQ7Rr5FXBg+PnhjFg==,type:str]
+            storage: ENC[AES256_GCM,data:QtJGTQ==,iv:Q+Ts2uHl+EHRe6bPmAFvAIu7mTNl0oSBK6AsXGU69Wg=,tag:m03P5ISt5+KwwB4JbcjdhA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -69,14 +69,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBia0QzczRwUmlrUWdhMXNE
-            NkNyNTRRVGhtQ3M2VDNtTHduWEhpOFlVdkIwCnpVS0lXMFhuL0RkMkVYdHU3eDY1
-            dTVncldweFE2NU5McTFoeXZiR0FWemcKLS0tIGxJUXpUZXk0S2xDV2Y0TEJWaWkv
-            bERQWlh6YkRFb2laYndreWFDTmRveXMKJrnHBUXDqSMvLJ46t6nu6EU0ktmz2LVD
-            k9/WCpXyYNzG8cxhVov71KBFDUj16PUIVwfVeph6m3g73KhpQa+6Rw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJY2NxZzRteTRZMktUL0Vl
+            U2dXNXY0TDMvVzl1eXBBOFd4QjVSY1pjZ0ZBClZqTkVmSEcydjJJek9yT1VSWGNR
+            RDdNWE1ycm9IcU9US051bElJUXZDNkEKLS0tIHkydEt4d013WnVYTW81T0VzeE5i
+            amlDQ09ERjYrTitJMkY0NUhwMG9kak0KMVIF+PCh74BNDPIJoraTqJCnzbezdO+n
+            arB6q2dHVUjUrXUMJgWGtMssLT7EmCS5eeUbTNdVrfXcEbPx9vgNxw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:10Z"
-    mac: ENC[AES256_GCM,data:YpWZwWSUbiMbFINrSuxBMZgUzyLJPSYWGojTXCtUmD8CG8TGMekbAGbIwDY40VL/lU8mTVKaZj7dpuNn7l+9cR3TYND1ap4iQFJ0JpZRLxWotYA0D9S6A+SuuJZ3tUBoh2grrrPrwt3+P3X2tI3K38tMS2ZD5sd6JwhHzv4KqeA=,iv:WHFiHXHRNSHJlLwdapxfD6frfVSyuecI2gqBFrHsC4I=,tag:6L/IJbttcVdSafYyevbKXQ==,type:str]
+    lastmodified: "2025-06-29T21:30:59Z"
+    mac: ENC[AES256_GCM,data:ILi7Y8PmwrC/KRcA/Cw8nMmsdfjHDF9L6F4Vj5smLqgBE0esdgvtGMxKUKZ+dqZUz+AU6gfgp8Bm5b0ubUNlrc4Xfqu3Xfby/MlwRZwGpLh85DANy4EEYLvuPo3ffR/Ha462GeBU91Lehku7LKt422MLRKaS3Girgws5VXBzXOQ=,iv:mNrNVeD9z5hDgSkdhZ7f+tc/kUL6ezT8cEog3mdnhJY=,tag:GPzyB7+hG/8tczaUY89yfg==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -92,13 +92,13 @@ metadata:
        metallb.universe.tf/allow-shared-ip: internal
 spec:
    type: LoadBalancer
-    loadBalancerIP: ENC[AES256_GCM,data:JECftFHkxcKFipc6Rw==,iv:7WFKjLvvfHb0vktO/jLjvsagpYhDtbQQiVnZGZlt/C0=,tag:TaNg1xEZJ7o6JPcOfs6OLg==,type:str]
+    loadBalancerIP: ENC[AES256_GCM,data:5Ok3IFaqK+AzhnbVhQ==,iv:YEKPPSK3e8nCgzbphkJhIPCspZ5EAf3JHI+uVNltMdw=,tag:SJcfgR6UmVrpeuE+YQXqGg==,type:str]
    ports:
-        - port: ENC[AES256_GCM,data:ZTCp7V8=,iv:6LPtlsPNiosYf1WcnQK0idOqkipwq1T2NHANRKS3fWY=,tag:yW1WC97Np9U6GptvLogFJw==,type:int]
-          protocol: ENC[AES256_GCM,data:qCYS,iv:YXjckzzlDpnD82Bmmsj6JVBJmbDq+My7WdhbuegAWLk=,tag:UkiMaxoCShAVEfeisYeWkQ==,type:str]
-          targetPort: ENC[AES256_GCM,data:sQVslQ==,iv:Ol8MtouF1SSN8OAn1t5qc5fGTjAqPIkhQEEoy9E1aqc=,tag:0DqomxT6Mrn4yA0lLnBijw==,type:int]
+        - port: ENC[AES256_GCM,data:P/XziNo=,iv:9ktQaBfXp7m52ygYSpxNnPQYTQxTPE6KFu49DGLnh6s=,tag:LRxIxv2uBIztcaQHVGWtqw==,type:int]
+          protocol: ENC[AES256_GCM,data:qaUF,iv:VwjdwidxtXc4rNn+ZSNouuvVEyHNOmT3G25NmPtS0K8=,tag:Hl+OwQ8bd3pkPr1N5Fc4Dg==,type:str]
+          targetPort: ENC[AES256_GCM,data:MchrvQ==,iv:Dugu+kOrRgmVK8FZKDFEKmQqCyQG7mrScDhaz3ADaBc=,tag:F7oeos+D6jIcXNUtEUz1tQ==,type:int]
    selector:
-        app: ENC[AES256_GCM,data:dRkKgow=,iv:iz9by6UCsA+XO2CavFVz2JtMRt3gFhXb1UJ/Dq9w9TU=,tag:xO2RMcz+bQpGGXJgulGJ8g==,type:str]
+        app: ENC[AES256_GCM,data:7+9VoQA=,iv:pO1kKMauUhQA29cadegQzZLNGqU8mEeVbe50ZgvM40E=,tag:+DVMOrMqbrA57IuejGYmYQ==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -108,14 +108,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBia0QzczRwUmlrUWdhMXNE
-            NkNyNTRRVGhtQ3M2VDNtTHduWEhpOFlVdkIwCnpVS0lXMFhuL0RkMkVYdHU3eDY1
-            dTVncldweFE2NU5McTFoeXZiR0FWemcKLS0tIGxJUXpUZXk0S2xDV2Y0TEJWaWkv
-            bERQWlh6YkRFb2laYndreWFDTmRveXMKJrnHBUXDqSMvLJ46t6nu6EU0ktmz2LVD
-            k9/WCpXyYNzG8cxhVov71KBFDUj16PUIVwfVeph6m3g73KhpQa+6Rw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJY2NxZzRteTRZMktUL0Vl
+            U2dXNXY0TDMvVzl1eXBBOFd4QjVSY1pjZ0ZBClZqTkVmSEcydjJJek9yT1VSWGNR
+            RDdNWE1ycm9IcU9US051bElJUXZDNkEKLS0tIHkydEt4d013WnVYTW81T0VzeE5i
+            amlDQ09ERjYrTitJMkY0NUhwMG9kak0KMVIF+PCh74BNDPIJoraTqJCnzbezdO+n
+            arB6q2dHVUjUrXUMJgWGtMssLT7EmCS5eeUbTNdVrfXcEbPx9vgNxw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:10Z"
-    mac: ENC[AES256_GCM,data:YpWZwWSUbiMbFINrSuxBMZgUzyLJPSYWGojTXCtUmD8CG8TGMekbAGbIwDY40VL/lU8mTVKaZj7dpuNn7l+9cR3TYND1ap4iQFJ0JpZRLxWotYA0D9S6A+SuuJZ3tUBoh2grrrPrwt3+P3X2tI3K38tMS2ZD5sd6JwhHzv4KqeA=,iv:WHFiHXHRNSHJlLwdapxfD6frfVSyuecI2gqBFrHsC4I=,tag:6L/IJbttcVdSafYyevbKXQ==,type:str]
+    lastmodified: "2025-06-29T21:30:59Z"
+    mac: ENC[AES256_GCM,data:ILi7Y8PmwrC/KRcA/Cw8nMmsdfjHDF9L6F4Vj5smLqgBE0esdgvtGMxKUKZ+dqZUz+AU6gfgp8Bm5b0ubUNlrc4Xfqu3Xfby/MlwRZwGpLh85DANy4EEYLvuPo3ffR/Ha462GeBU91Lehku7LKt422MLRKaS3Girgws5VXBzXOQ=,iv:mNrNVeD9z5hDgSkdhZ7f+tc/kUL6ezT8cEog3mdnhJY=,tag:GPzyB7+hG/8tczaUY89yfg==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -130,11 +130,11 @@ metadata:
 spec:
    type: ClusterIP
    ports:
-        - port: ENC[AES256_GCM,data:JHWCgA==,iv:lH/9X6tRVkkXOxB89U4Ey2RHFNFqaHUwSkSHKcecBSc=,tag:qpSa/LzJ0P2VfsIWs+PLrQ==,type:int]
-          protocol: ENC[AES256_GCM,data:9ooH,iv:J/FwfTUx82eHJ19r7NUaw928Z5YPXlX8CfElqtjydnI=,tag:7VDlHpY5Dv2R90CzgSPhXQ==,type:str]
-          targetPort: ENC[AES256_GCM,data:PShADQ==,iv:ahZRrK9c/3w85hpz8cvSsaJMPMXTdr/tRQwAXY2sqNk=,tag:8h8LNNaWAD+R0xxtPWnjrg==,type:int]
+        - port: ENC[AES256_GCM,data:kh2b0w==,iv:HdJGUXoct9C17KN3suzTA11Q+JJcEa2QtPA6zDacxzQ=,tag:hhAMklzTYTgOvMUAcRMn+g==,type:int]
+          protocol: ENC[AES256_GCM,data:jGu2,iv:4EPSmTwdB1JcmYuA37Z0nh+fpGEIgNaGynU4POnSDJ8=,tag:7PkRuF1OyGqGg+kO1utxeQ==,type:str]
+          targetPort: ENC[AES256_GCM,data:nJrT0g==,iv:gwhAT/EEv/UVImrsVwrF4QJGmxJEEfJez1srk6UadO0=,tag:S4NG3MiZ2VAQwSRrm7YkDQ==,type:int]
    selector:
-        app: ENC[AES256_GCM,data:2LRqF20=,iv:Rmi+8g8M88ljXUcpK6EVven43y2QMBm7OVHVonNaH3A=,tag:rSjvqAEH6jkXsd1qgNsUMg==,type:str]
+        app: ENC[AES256_GCM,data:OiDnKFQ=,iv:QjvRaP1IGZ/+V4i2eg/nDfKGmY9qWeEy3xz3PtPCt7o=,tag:f3qXyHNJ23NqjrNZJ72V7A==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -144,14 +144,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBia0QzczRwUmlrUWdhMXNE
-            NkNyNTRRVGhtQ3M2VDNtTHduWEhpOFlVdkIwCnpVS0lXMFhuL0RkMkVYdHU3eDY1
-            dTVncldweFE2NU5McTFoeXZiR0FWemcKLS0tIGxJUXpUZXk0S2xDV2Y0TEJWaWkv
-            bERQWlh6YkRFb2laYndreWFDTmRveXMKJrnHBUXDqSMvLJ46t6nu6EU0ktmz2LVD
-            k9/WCpXyYNzG8cxhVov71KBFDUj16PUIVwfVeph6m3g73KhpQa+6Rw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJY2NxZzRteTRZMktUL0Vl
+            U2dXNXY0TDMvVzl1eXBBOFd4QjVSY1pjZ0ZBClZqTkVmSEcydjJJek9yT1VSWGNR
+            RDdNWE1ycm9IcU9US051bElJUXZDNkEKLS0tIHkydEt4d013WnVYTW81T0VzeE5i
+            amlDQ09ERjYrTitJMkY0NUhwMG9kak0KMVIF+PCh74BNDPIJoraTqJCnzbezdO+n
+            arB6q2dHVUjUrXUMJgWGtMssLT7EmCS5eeUbTNdVrfXcEbPx9vgNxw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:10Z"
-    mac: ENC[AES256_GCM,data:YpWZwWSUbiMbFINrSuxBMZgUzyLJPSYWGojTXCtUmD8CG8TGMekbAGbIwDY40VL/lU8mTVKaZj7dpuNn7l+9cR3TYND1ap4iQFJ0JpZRLxWotYA0D9S6A+SuuJZ3tUBoh2grrrPrwt3+P3X2tI3K38tMS2ZD5sd6JwhHzv4KqeA=,iv:WHFiHXHRNSHJlLwdapxfD6frfVSyuecI2gqBFrHsC4I=,tag:6L/IJbttcVdSafYyevbKXQ==,type:str]
+    lastmodified: "2025-06-29T21:30:59Z"
+    mac: ENC[AES256_GCM,data:ILi7Y8PmwrC/KRcA/Cw8nMmsdfjHDF9L6F4Vj5smLqgBE0esdgvtGMxKUKZ+dqZUz+AU6gfgp8Bm5b0ubUNlrc4Xfqu3Xfby/MlwRZwGpLh85DANy4EEYLvuPo3ffR/Ha462GeBU91Lehku7LKt422MLRKaS3Girgws5VXBzXOQ=,iv:mNrNVeD9z5hDgSkdhZ7f+tc/kUL6ezT8cEog3mdnhJY=,tag:GPzyB7+hG/8tczaUY89yfg==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -172,24 +172,24 @@ metadata:
 spec:
    tls:
        - hosts:
-            - ENC[AES256_GCM,data:5XaSiRD6Abk2XnDVhif4q+39Tb/2LfiJUw==,iv:SFM1sz/EYwK6fN3RranF5g77jr6skAlBndMuyo9M8FE=,tag:CQ1AggxYfprNqYlrj3ZJXQ==,type:comment]
-            - ENC[AES256_GCM,data:GZuRUqWBM6EM0aCdXpwvC1RRxlaA4Q==,iv:G759j0UG9ocS/4CUzklTJkS3MzHwIwa+0wghHwQHb0s=,tag:xOGTeUXWoDgIEibfnl9+Iw==,type:str]
-          #ENC[AES256_GCM,data:UwY80yaJt78wPIVyZgTlnLDbpLXT5BoaBfwhly0SGe+6XwmqVkxYBvebLT8lzAcSfQT7YQiKSdiU,iv:wNvDD60NQe7TYqCKz2ehsiisyeDxW+GOKuG2s+jkUCU=,tag:GayJvQuZoHIvS/6UbX0L1Q==,type:comment]
-          secretName: ENC[AES256_GCM,data:+To0r/ndpnX0EohYYLM=,iv:vLWhkCA7o/sQZUVmVxvZJJ+KCVa6mmPuPDDTuweLM7A=,tag:4vBv1aqyUYb0pRxKz6MtmA==,type:str]
+            - ENC[AES256_GCM,data:ONunVyYm4pwnRwZ6KCNj44g+T0fBDD1IjA==,iv:jKm5vLSKFdAh4A6kEXxhd4QNh6MXFGNugAZGqVnpH0Y=,tag:92Zfte+0ENpgo0XBxEfMMQ==,type:comment]
+            - ENC[AES256_GCM,data:D+mYAeieSaiYpBDMI51EbeNE5FQkQg==,iv:q7BACfpO+fmGnPs0RGiod+mDni+pjF150kXzyY/xxe4=,tag:0iqLvVknFPS9eVwIE7oXyg==,type:str]
+          #ENC[AES256_GCM,data:dTQWA6612tv62T++PRgzBYIYQtqkwRAGJVYaZUydVN/qWxX0mpwJETLTC4fLFbEc2dWFzjgNdNNm,iv:Fez5I2KXRY1Q2nNnTCbsA1qVVCZ+iaCt+4ErrjfXipo=,tag:c5RCJ8plqL/8SWuxMROEqQ==,type:comment]
+          secretName: ENC[AES256_GCM,data:YreUtEpxSTQG9C6ENSM=,iv:D+hLbz7a4dGqvtjoLxAG9gQAjk38rEoakcdqReoCMUc=,tag:nKs1T9Ug266tSgPYV1SUnw==,type:str]
    rules:
-        - ENC[AES256_GCM,data:eajs/l1qwbKARl1sI7BYeBFyRKj9wa6CCQ==,iv:56vohk3B8CtFjEQt6z83YM8xgSh3UTMh/bo4Ji0Ea4A=,tag:/PQVhdJV0eYgyyp1ZIoB5g==,type:comment]
-        - host: ENC[AES256_GCM,data:pn1RrlLMgVojqGlhAdFAeWic3lUNSQ==,iv:3Zp/TD72xX1K8GTJPbmQIL+EdYthVSMfqFqryZMTkVs=,tag:XFGQ3suclR74sUveKuRr6w==,type:str]
+        - ENC[AES256_GCM,data:ey6s98zu2UwYC6Whqp0KDOFK57b6p4U7Sg==,iv:1ikNFXhAcUDJZH+wcUzTBilX1uT0/9aq49qCzyTO8DU=,tag:Ym8TCQuFBsbq3PQceVtQ0w==,type:comment]
+        - host: ENC[AES256_GCM,data:dDkpnysz1UaQDIZL2qfmALd+vLP8AQ==,iv:qUOw32U+GF1tHZTCUZ7hRHbflx8OhaERyqFSHcKhnV0=,tag:f2c7n6yhtUU3h4xFtFrScg==,type:str]
          http:
            paths:
-                - ENC[AES256_GCM,data:zdtO3yctDLIQLmTdaW1gdDEQx95AuYVzJevVDYLHjJHUxh0/sdPx0wdI/IkUCnU3JTsVHYDPHUWOydISfzkGyy0JlMyJ,iv:+tB05xj67hNSKOhiRBuMDwwxQHc5nAndqTq1TWmHO3g=,tag:OoRWySxo6tHfa++MHnDy1Q==,type:comment]
-                - path: ENC[AES256_GCM,data:+A==,iv:KZ1kd0V+Bo0ezfn/KZxaNMiNjMVSmuzQ4WdvNpvkFUM=,tag:FGKf06G3+NEpzDzEJi6sIg==,type:str]
-                  pathType: ENC[AES256_GCM,data:JG1MHjVj,iv:iOvjN2F+Pnrkg53Imx6vt/XASjQ+kUxdUi5pF1D33ik=,tag:6O4TyZT5pRwI8Q1tPM/SNw==,type:str]
+                - ENC[AES256_GCM,data:9ziiOEJ8QVOtvqB4UVdGXTFSyhpzNer+uEJA5l2i0tGO/NqEGEeZnzeui6ddujP+MtUiEMcShAy7DFUUW8mjrLm/Y6RM,iv:himWFgEw/BM3EOejII44uvlT2dvfUCn83Li3GXEMNU8=,tag:YhoO6wRiYun2oeV9qd54lA==,type:comment]
+                - path: ENC[AES256_GCM,data:lQ==,iv:3v/BZC6mxfClLNrh7QWwAIHd8JXQftcQtOQbnaIUmso=,tag:NbakWKpF9rrw7HFnBc2mCw==,type:str]
+                  pathType: ENC[AES256_GCM,data:S8y0zZgc,iv:6raKuDBFYVPXFE+iGl9Z9BW99y36zQptrHoyGp0Bcf8=,tag:okZfTtvFyxCEn/So+STbAg==,type:str]
                  backend:
                    service:
-                        #ENC[AES256_GCM,data:CGowVLT04xqqH5A9MDLSxQvmoAeQdEAPpT4SElQfhgvrKVl2T2fsMHUlhXxEibbbawmcADwcPO2zb8ZHWXkj,iv:FuAa7oUd/WNuuBOf8iWSd1i9Kh1SIu7lMpBuDH2577s=,tag:Gdnk4drhVcJTxWHVPFNuIw==,type:comment]
-                        name: ENC[AES256_GCM,data:0lDzTUkgYEClrA0tJp92WWYa,iv:09jlUgTww3bsWHpqDrJjKHJuqvB6JTuFD2e/uwV7aaU=,tag:JaMjZvDpxRsTh2PKJmBedg==,type:str]
+                        #ENC[AES256_GCM,data:waWYBLFUwXS3obzdNU8hctpQzIQB7XihR0TEOfrIaZ81h/eNSoGoEaoshlJknBZ6lCFNDK0B7QI7vDA6QAFJ,iv:heDu2HYwfK+MeOJbd+LyOsmV7comd40y7FnGUk/+SXU=,tag:9aM0R//n/xWcNNnsxx+kmw==,type:comment]
+                        name: ENC[AES256_GCM,data:myMd6LSaxgzQKa5VQZWw0lTH,iv:MLB9xQ0ndHUco+cx7UHcHT/xlQzlIKha5QbCm8Us2m4=,tag:IcZ9/htFNVckHfp+bQDn0A==,type:str]
                        port:
-                            number: ENC[AES256_GCM,data:blCCfQ==,iv:GWx8xOOm0XsVqmbS5BxZRzYa49f/bq2DYzuy9vhSqgk=,tag:7dOU1C6xdDlYFU716qC3hQ==,type:int]
+                            number: ENC[AES256_GCM,data:kFNM6Q==,iv:tgH+9Hj8y5Pyj+ZdKzdCCC5r4QUmmA0MN7j+HtKNLYQ=,tag:HUOzLLKb/8aYUSWxCSzUZg==,type:int]
 sops:
    kms: []
    gcp_kms: []
@@ -199,14 +199,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBia0QzczRwUmlrUWdhMXNE
-            NkNyNTRRVGhtQ3M2VDNtTHduWEhpOFlVdkIwCnpVS0lXMFhuL0RkMkVYdHU3eDY1
-            dTVncldweFE2NU5McTFoeXZiR0FWemcKLS0tIGxJUXpUZXk0S2xDV2Y0TEJWaWkv
-            bERQWlh6YkRFb2laYndreWFDTmRveXMKJrnHBUXDqSMvLJ46t6nu6EU0ktmz2LVD
-            k9/WCpXyYNzG8cxhVov71KBFDUj16PUIVwfVeph6m3g73KhpQa+6Rw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJY2NxZzRteTRZMktUL0Vl
+            U2dXNXY0TDMvVzl1eXBBOFd4QjVSY1pjZ0ZBClZqTkVmSEcydjJJek9yT1VSWGNR
+            RDdNWE1ycm9IcU9US051bElJUXZDNkEKLS0tIHkydEt4d013WnVYTW81T0VzeE5i
+            amlDQ09ERjYrTitJMkY0NUhwMG9kak0KMVIF+PCh74BNDPIJoraTqJCnzbezdO+n
+            arB6q2dHVUjUrXUMJgWGtMssLT7EmCS5eeUbTNdVrfXcEbPx9vgNxw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:10Z"
-    mac: ENC[AES256_GCM,data:YpWZwWSUbiMbFINrSuxBMZgUzyLJPSYWGojTXCtUmD8CG8TGMekbAGbIwDY40VL/lU8mTVKaZj7dpuNn7l+9cR3TYND1ap4iQFJ0JpZRLxWotYA0D9S6A+SuuJZ3tUBoh2grrrPrwt3+P3X2tI3K38tMS2ZD5sd6JwhHzv4KqeA=,iv:WHFiHXHRNSHJlLwdapxfD6frfVSyuecI2gqBFrHsC4I=,tag:6L/IJbttcVdSafYyevbKXQ==,type:str]
+    lastmodified: "2025-06-29T21:30:59Z"
+    mac: ENC[AES256_GCM,data:ILi7Y8PmwrC/KRcA/Cw8nMmsdfjHDF9L6F4Vj5smLqgBE0esdgvtGMxKUKZ+dqZUz+AU6gfgp8Bm5b0ubUNlrc4Xfqu3Xfby/MlwRZwGpLh85DANy4EEYLvuPo3ffR/Ha462GeBU91Lehku7LKt422MLRKaS3Girgws5VXBzXOQ=,iv:mNrNVeD9z5hDgSkdhZ7f+tc/kUL6ezT8cEog3mdnhJY=,tag:GPzyB7+hG/8tczaUY89yfg==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -219,10 +219,10 @@ metadata:
    labels:
        app: gitea
 spec:
-    replicas: ENC[AES256_GCM,data:SQ==,iv:NwkAE0xaBGJw4CHU284c4zzpkQ1pFJrHdMIPyJU9T0I=,tag:gDjpIxRAi0Tf89BLGPlf+g==,type:int]
+    replicas: ENC[AES256_GCM,data:iw==,iv:0CwlODiidSFkKCqOLlMNKSraF2DZYT9rSXIY54m81lo=,tag:04k7jpvOQ1jiuAQjiqdimQ==,type:int]
    selector:
        matchLabels:
-            app: ENC[AES256_GCM,data:0fjToGM=,iv:baSSXLSnSb3DqrWPRWeiWtwPHbmRTikkpaB+bCGk4DM=,tag:ohm/BZMd6IZPBT+MmvI9Vg==,type:str]
+            app: ENC[AES256_GCM,data:a9r4PMg=,iv:+mqr5em3RZiQSZRCKWcXF5tOXp3X/3vecKQGwJmUDj0=,tag:hTNp8pUp2KP+WzTWEEDBow==,type:str]
    template:
        metadata:
            labels:
@@ -230,19 +230,19 @@ spec:
                name: gitea
        spec:
            containers:
-                - name: ENC[AES256_GCM,data:cPipbzI=,iv:pgPAh6lxC7duk3cR5hnIjrjk2kssa1djIOcWp/0QoJs=,tag:7iQmptsqKwnjWa/NCZi/rg==,type:str]
-                  image: ENC[AES256_GCM,data:xf0W59ZdQq2FT2Y4nPgDslot,iv:tJngsBKAlo0jsKgcOVV7nqJiloIHr8QZfcYne8p5kn8=,tag:J98DiDysNCcCeFdm7q02iA==,type:str]
-                  imagePullPolicy: ENC[AES256_GCM,data:pH8KpQyNv2facOL5,iv:hcfxi51AXdUqLGJVmi3xdERdgXv3mqN0AZAzYAEzPwo=,tag:LIkgBWYrIhonzK2F5mv9bA==,type:str]
+                - name: ENC[AES256_GCM,data:Sv4KGEw=,iv:+ivhuYI/QiyoFOl2eCEWVJuAAYJQDfDOc2RNV69AF/s=,tag:+iYYIorfmInBJxJBLxc5UA==,type:str]
+                  image: ENC[AES256_GCM,data:O1vWjZj92arHpDaAT3kS6evn,iv:BKSmz0vwwsjkAc+RgI58GaDgQC6wr55Up+EJD2RlJ9k=,tag:eGWVPa0fvi2HwL4UsR77/w==,type:str]
+                  imagePullPolicy: ENC[AES256_GCM,data:yVZbriKh2Sc3zCrQ,iv:hG6CRuosk4VWH8k+dMMc2x5DdYzaPLMX6LbeAoBQUsk=,tag:r1F2cooYQdGm+amrEUC+pg==,type:str]
                  ports:
-                    - containerPort: ENC[AES256_GCM,data:6rbu1g==,iv:TTZuc+Lvr1pSDu7ETxaYXm4Hr3DFUiReSa6igy0+u0w=,tag:g7H2NO3TjkmB/wivx+jCmQ==,type:int]
+                    - containerPort: ENC[AES256_GCM,data:O79JBw==,iv:M88pu3XNRgJ6ckOUo5LjY3+dStus4TG6qXXwQDWzzTE=,tag:nsZnW6QKqKhjJOUVTK0aTQ==,type:int]
                  volumeMounts:
-                    - name: ENC[AES256_GCM,data:t7rP0Wi+7XaW8fli,iv:oBuKP57LhpLdX7WV2CCWvhB2tGVwVbxSloqN9m9aUDk=,tag:eysPJO2DEL8hSYmeQQkZZg==,type:str]
-                      mountPath: ENC[AES256_GCM,data:XMXIOJ4=,iv:ybPPr0jNUgJKARJ1WocGb9TiJLEImYzPwQQh0Z8hTVc=,tag:4ATXIY7rskk7UnniOB90Lw==,type:str]
+                    - name: ENC[AES256_GCM,data:CGXp9d4gGuTs0zyB,iv:lyU19jGCAtriqXW4K/moH0cskElso8SdiXbyj4NQxD8=,tag:No7w2gvpBq/sb+wD2ft3mg==,type:str]
+                      mountPath: ENC[AES256_GCM,data:nl1xnpg=,iv:XfQlqOLYLw00SYbwLNbBlTz5oEYmxRp5t4/x+m7QDsE=,tag:FpDh1vtz+oFVqtiUiPJirA==,type:str]
                  resources: {}
            volumes:
-                - name: ENC[AES256_GCM,data:rikO9YN2I7oErjyJ,iv:pr5gadnadtBu6rTU7zdw87hawUt171w8wjtpjuyi5Ec=,tag:yJTmLWonfT0TVj+9gK0SLw==,type:str]
+                - name: ENC[AES256_GCM,data:p7j6NcWOfGvlUL7h,iv:iK/GVEl3B0HRVrIkfPSzRwiYsBAP2QxAPCqYnLyxhRg=,tag:unJ296caluHEgZy2PibZZA==,type:str]
                  persistentVolumeClaim:
-                    claimName: ENC[AES256_GCM,data:xvPw9+xd8tDZ,iv:dZvZV6JSbSMkTHhJwUKcUlCe67eZbXv5rw2jgnbTuCo=,tag:NxfQ2rWFPsKU6FBJdSK90A==,type:str]
+                    claimName: ENC[AES256_GCM,data:tx9VUoEvfz3f,iv:YzqdjFC6CGEoT6IFrH+96hPnQJUPjz++2uaYnIE43lU=,tag:PRkf63ZPMLo/XqI7eHBapA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -252,14 +252,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBia0QzczRwUmlrUWdhMXNE
-            NkNyNTRRVGhtQ3M2VDNtTHduWEhpOFlVdkIwCnpVS0lXMFhuL0RkMkVYdHU3eDY1
-            dTVncldweFE2NU5McTFoeXZiR0FWemcKLS0tIGxJUXpUZXk0S2xDV2Y0TEJWaWkv
-            bERQWlh6YkRFb2laYndreWFDTmRveXMKJrnHBUXDqSMvLJ46t6nu6EU0ktmz2LVD
-            k9/WCpXyYNzG8cxhVov71KBFDUj16PUIVwfVeph6m3g73KhpQa+6Rw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJY2NxZzRteTRZMktUL0Vl
+            U2dXNXY0TDMvVzl1eXBBOFd4QjVSY1pjZ0ZBClZqTkVmSEcydjJJek9yT1VSWGNR
+            RDdNWE1ycm9IcU9US051bElJUXZDNkEKLS0tIHkydEt4d013WnVYTW81T0VzeE5i
+            amlDQ09ERjYrTitJMkY0NUhwMG9kak0KMVIF+PCh74BNDPIJoraTqJCnzbezdO+n
+            arB6q2dHVUjUrXUMJgWGtMssLT7EmCS5eeUbTNdVrfXcEbPx9vgNxw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:10Z"
-    mac: ENC[AES256_GCM,data:YpWZwWSUbiMbFINrSuxBMZgUzyLJPSYWGojTXCtUmD8CG8TGMekbAGbIwDY40VL/lU8mTVKaZj7dpuNn7l+9cR3TYND1ap4iQFJ0JpZRLxWotYA0D9S6A+SuuJZ3tUBoh2grrrPrwt3+P3X2tI3K38tMS2ZD5sd6JwhHzv4KqeA=,iv:WHFiHXHRNSHJlLwdapxfD6frfVSyuecI2gqBFrHsC4I=,tag:6L/IJbttcVdSafYyevbKXQ==,type:str]
+    lastmodified: "2025-06-29T21:30:59Z"
+    mac: ENC[AES256_GCM,data:ILi7Y8PmwrC/KRcA/Cw8nMmsdfjHDF9L6F4Vj5smLqgBE0esdgvtGMxKUKZ+dqZUz+AU6gfgp8Bm5b0ubUNlrc4Xfqu3Xfby/MlwRZwGpLh85DANy4EEYLvuPo3ffR/Ha462GeBU91Lehku7LKt422MLRKaS3Girgws5VXBzXOQ=,iv:mNrNVeD9z5hDgSkdhZ7f+tc/kUL6ezT8cEog3mdnhJY=,tag:GPzyB7+hG/8tczaUY89yfg==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -4,12 +4,12 @@ metadata:
    name: gitea-runner-2-pvc
    namespace: dev-stuff
 spec:
-    storageClassName: ENC[AES256_GCM,data:bRoWa1y3mukiXg==,iv:l1xiSUnxvCkD1ZMk8ZWV0/kYWnfSgI4GdwkkyF6fI38=,tag:mjPSa1hw3CvCIn3rPqJZIg==,type:str]
+    storageClassName: ENC[AES256_GCM,data:Y0A3jawqJuQcYg==,iv:BEK3O5ce/VjNsRznmlsE/RQVW4NDlmnvkMn/aXGASYc=,tag:nMnokBb93JLW4S6vQmXKYg==,type:str]
    accessModes:
-        - ENC[AES256_GCM,data:QBKhPkIcD5nMMW53Nw==,iv:jQccm4P7YFGIdxm2SvLutMRnKacigU/wc7QyFuS6W6Y=,tag:2575j1Gp3tj9cll9926zUg==,type:str]
+        - ENC[AES256_GCM,data:+Q6UAytle/qq7/nXTA==,iv:vdYPQeW82EYUXUSuTI0ebpBlwsKG6JZwG64wfEYqQGA=,tag:XJbqZoGUghX2ha/hLcGE0Q==,type:str]
    resources:
        requests:
-            storage: ENC[AES256_GCM,data:nvMU,iv:aA0oB0zPmEombXPca1gvBJj1nZFUGroCPgqHFHHboG0=,tag:JZDuhbulbdQE2Q9uhR4i6g==,type:str]
+            storage: ENC[AES256_GCM,data:eMss,iv:egOdkudXPu2ctI79SenN1vZ8XFSaWGHwpINcpcP5y/M=,tag:lBfEGICOH6vG/C9Jd1iyLA==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -19,21 +19,21 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFNWlENTdMcFBoNFdRTTR2
-            cmlzQ2c1Q0t5dnFJK0hKT05kSm5LRVlnS1JnClVXRk0rdG9RVVdCNS9maElUWnAx
-            VUkzWXd3YkZDVjVoRDY5T0NYV1g3cWMKLS0tIDVRVXlDV2FibFE4MzZPYlp3U3Rk
-            VGsxdXdkVWNkeUh3bHVOdEJ2V0ZNc1kKj0YOwAemF711J3Kl09wIZ5D/Uca6Q/Uu
-            3n6Bl/EJLTegBcq7VkvIbuBN3Yv8ALmX0lGtEjY8OKw0laTnRhnF2w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1cERZVzZmalJLU1VlRTZC
+            cW5VdWNqQUhzNWEyaFFEWFgvajRkMTBnVXc4CmpwdHdEMnoxV1FUc3JMNDhXVlJS
+            NHdwVVhYTzNzVmcxQnVJalBZanpyb2cKLS0tICtCQXRvenhHN2VqM0l3WDNnL3Ji
+            bnN6cnpGQ0FMclB1QnF1Rm1YZEhmWFEK6dMHvnqGRoh24cCkutwVR3lfAAyWsh3t
+            bLlxS2NtKue/x/JKg0EWwPzawughs5nQJdUs9wR8HL/OytEGJcbowg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:10Z"
-    mac: ENC[AES256_GCM,data:3E7q4/UMjCOA5AxZQa5/X6CqXkzZx5uw3MjFUS5nPHmfdCmU/kcd6eDG/sigTBZjz17vWHRawCxTP/IYzamxJtOLnVHOlDjSXs2nIwicugRV4oI0MVQkWAEvjCo7zF6YRaCAivubx7vR1oi58jCtDt7Jv0Pwf2fgUdZmiPuTknw=,iv:5P/dS8qsgo/HtZGxlMrdxPHZRlUEbji7Y/lM/LDA6Jc=,tag:jgxQounEuTDeFYUXxjKIdg==,type:str]
+    lastmodified: "2025-06-29T21:30:59Z"
+    mac: ENC[AES256_GCM,data:fMHVlnfAbbIMghxsWdiuF6DsV4bP8pKzFiun2doT2fovLDiD2lqQtddOx7tmQZooTtvsDTzk9MLVlK5FkOXTpVXoZkAH/U6v0VLSRmlaf3qyFyIPj3+ox+ITJ+KRbbHK0aCa8+BbkHU8naRjk881eV2bMTN2saVQ5JbbBXCgmsM=,iv:jSPp/E4E6FVtUrmqriVCLa8kW9u2dgIsJSpOk1rRZuk=,tag:o89S9vQx2jS0SeGjakXxSA==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
 ---
 apiVersion: v1
 stringData:
-    token: ENC[AES256_GCM,data:fbJFA0ejb8/qp2DL05ZM2O1tYo/xa17+Ng==,iv:Tldm5uaS4vN1JxUWTX1tgOkcNpA5TeCK1Ztxq9ngVcA=,tag:9CnxE2qnIxAA30lj/Cln9g==,type:str]
+    token: ENC[AES256_GCM,data:9qWP701oaa4P+Tdxm57QHnKUvKlWcNyUkA==,iv:pWLbB/OhXGfZY+L/ujk3K7iNI/C59h1kJCSfWTGOTbI=,tag:K4E5FMQMMYltxZyxWMtu2Q==,type:str]
 kind: Secret
 metadata:
    name: runner-secret
@@ -48,14 +48,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFNWlENTdMcFBoNFdRTTR2
-            cmlzQ2c1Q0t5dnFJK0hKT05kSm5LRVlnS1JnClVXRk0rdG9RVVdCNS9maElUWnAx
-            VUkzWXd3YkZDVjVoRDY5T0NYV1g3cWMKLS0tIDVRVXlDV2FibFE4MzZPYlp3U3Rk
-            VGsxdXdkVWNkeUh3bHVOdEJ2V0ZNc1kKj0YOwAemF711J3Kl09wIZ5D/Uca6Q/Uu
-            3n6Bl/EJLTegBcq7VkvIbuBN3Yv8ALmX0lGtEjY8OKw0laTnRhnF2w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1cERZVzZmalJLU1VlRTZC
+            cW5VdWNqQUhzNWEyaFFEWFgvajRkMTBnVXc4CmpwdHdEMnoxV1FUc3JMNDhXVlJS
+            NHdwVVhYTzNzVmcxQnVJalBZanpyb2cKLS0tICtCQXRvenhHN2VqM0l3WDNnL3Ji
+            bnN6cnpGQ0FMclB1QnF1Rm1YZEhmWFEK6dMHvnqGRoh24cCkutwVR3lfAAyWsh3t
+            bLlxS2NtKue/x/JKg0EWwPzawughs5nQJdUs9wR8HL/OytEGJcbowg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:10Z"
-    mac: ENC[AES256_GCM,data:3E7q4/UMjCOA5AxZQa5/X6CqXkzZx5uw3MjFUS5nPHmfdCmU/kcd6eDG/sigTBZjz17vWHRawCxTP/IYzamxJtOLnVHOlDjSXs2nIwicugRV4oI0MVQkWAEvjCo7zF6YRaCAivubx7vR1oi58jCtDt7Jv0Pwf2fgUdZmiPuTknw=,iv:5P/dS8qsgo/HtZGxlMrdxPHZRlUEbji7Y/lM/LDA6Jc=,tag:jgxQounEuTDeFYUXxjKIdg==,type:str]
+    lastmodified: "2025-06-29T21:30:59Z"
+    mac: ENC[AES256_GCM,data:fMHVlnfAbbIMghxsWdiuF6DsV4bP8pKzFiun2doT2fovLDiD2lqQtddOx7tmQZooTtvsDTzk9MLVlK5FkOXTpVXoZkAH/U6v0VLSRmlaf3qyFyIPj3+ox+ITJ+KRbbHK0aCa8+BbkHU8naRjk881eV2bMTN2saVQ5JbbBXCgmsM=,iv:jSPp/E4E6FVtUrmqriVCLa8kW9u2dgIsJSpOk1rRZuk=,tag:o89S9vQx2jS0SeGjakXxSA==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -68,10 +68,10 @@ metadata:
    name: gitea-runner-2
    namespace: dev-stuff
 spec:
-    replicas: ENC[AES256_GCM,data:gg==,iv:OmcgsuZVwKJnhyTBU6DbkaxAhfCX2Gq95NqvqXp89KU=,tag:5/WV9aJKibQmsj7D86RWWQ==,type:int]
+    replicas: ENC[AES256_GCM,data:eQ==,iv:J5CNy2rEWmrOWC3nzAgnfxbL8ee8E8wP5OueGpfvOSg=,tag:2RlvIn7+nuYIPwmdgg9pWQ==,type:int]
    selector:
        matchLabels:
-            app: ENC[AES256_GCM,data:/PsSUHMK8cIsw1Wt,iv:yV02BIyqG1U4jxLPtoOLD2G7uA0B59fY0T7d2RNtaUo=,tag:94/HCcCb4kRpUa7mE7NjDg==,type:str]
+            app: ENC[AES256_GCM,data:/ntebqjwQSXCxy06,iv:v9TllCvoAQP7N2JA+cG7hobgavMdoWRC2HMPOQyR0JY=,tag:O8W6TyZt7I81QfM/Kw4aLQ==,type:str]
    strategy: {}
    template:
        metadata:
@@ -79,37 +79,37 @@ spec:
            labels:
                app: gitea-runner
        spec:
-            restartPolicy: ENC[AES256_GCM,data:vZHf3sbr,iv:WKwo0CHTLfwDYJviKsrhltkqdOrf9/W9o8Y7O5BkNvY=,tag:qZIDDRHm6f7A8DFRo+hzbQ==,type:str]
+            restartPolicy: ENC[AES256_GCM,data:jy7A0nSO,iv:tvzoa92/gdBxVxf9CTKbtnf52l+jyh+XjNUPq54p0ls=,tag:sZ+V06UiSrIBP8EObmwYww==,type:str]
            volumes:
-                - name: ENC[AES256_GCM,data:izoM3X5/RyNRTLc=,iv:qnFqXgtxviCO0+vTjdelCpjjTrFoLsmEvzk0gKrZGQw=,tag:5kHZiRIKm3qwQbQFq9nm+g==,type:str]
+                - name: ENC[AES256_GCM,data:RjqE2OB3ekVZxZo=,iv:d81W9GFy+whxFtd0zT/WOvEjC4kZjNgew6wQoSLYw2g=,tag:8bdw1t+IUMLe9RL2VmXr1w==,type:str]
                  persistentVolumeClaim:
-                    claimName: ENC[AES256_GCM,data:k2qhNiTpxXZ+xvlmsvPRNg18,iv:3ydUbcc7xSbpNBnt6l8yLM73Ulyu7qMPVmBna2ydh4c=,tag:f9HddatvWSegTcuTtASwYQ==,type:str]
+                    claimName: ENC[AES256_GCM,data:jXWWrdbwpyHSvjbqyGv/pKDA,iv:GyluA98b0YDtP+Wy8f+HgTR+L/ODDrJfIWpAf0W/6mw=,tag:p+NuOCFFoVqTM11zG36Kdw==,type:str]
            securityContext:
-                fsGroup: ENC[AES256_GCM,data:S3GMAA==,iv:9wu6v/tX2U8TwbuyoJKjOCoIWk+WWxV4i9Hh3MKysDU=,tag:C7RJG2pzOk1HQlSa9CDkQQ==,type:int]
+                fsGroup: ENC[AES256_GCM,data:NPg0yQ==,iv:chxsDlDIfPRNBJO8hJBIk98c6jwFkKQItrj27RlZMKI=,tag:u+fXTkK/4drri3ymIDnuow==,type:int]
            containers:
-                - name: ENC[AES256_GCM,data:F2UhZ6pB7dvVB8VGXrU=,iv:CTOcV+whTNxCWc3LQbOu7mOorz+LufUR+YyTkvyM3NA=,tag:cDMyH9v+l6vCtFjC5pFj6w==,type:str]
-                  image: ENC[AES256_GCM,data:28WEnD/YmHpmMlLrnOfarVVQnJcNbmdUSWwzHV/dHLdWJ4VJgw==,iv:H1oCSkc26Y9DeGSy5wFYjnFkqV1sa7V2sp9oUlbL8T0=,tag:EtHG8b0brgtlKSQEWjJYnA==,type:str]
-                  imagePullPolicy: ENC[AES256_GCM,data:dOHXYnKyf6f21lm1,iv:kSM79PKF9W8IP46JO6YXmmbfL55Z6V2LGUBfQ9QBrIU=,tag:f0RjHB7NnxgAZCxOQWNgfA==,type:str]
-                  #ENC[AES256_GCM,data:1Y8SuTdPMxDpFDHxyEKja75T71X2gSCgP6++LDqp5ld39kB/Zzy8xAoi4npq+cKUgOgRESX6oCil8xrJFlMVRfk7o5FndgNd9oL8MZkeQIZ1+ebYJkpKuO+x/bapuD6Ww4Indqra/QrRon8NLUYCmjhAB2Np6WT6pb+gkV9YZ9/ND+BZ1MhztNTOs75sbAm0J4mPoDHNjA==,iv:jAaIHCrUGeBKXFzODKqJanlp7USaXE6ONpp8d8VL7do=,tag:J4TUIiN9DJmovx6Q0TOpJQ==,type:comment]
+                - name: ENC[AES256_GCM,data:elTwKveGLa3F4yCHYEA=,iv:geDAV3G7GDJ4PaPYKUQ/az8cccfbxY0WkAwRSn2oi2s=,tag:u4RKYV0yY5F0EHU6eDM/+A==,type:str]
+                  image: ENC[AES256_GCM,data:ygFAoYt5w97N27GieiLYyesXgjPfHorVdJ4uROqZGikUxh2txg==,iv:1LKXlgYoPX4SAzqrSZOv3npGB097TB8utnTz5ma0A3w=,tag:QPV0S8gaXsmvqyyaz5Tz/w==,type:str]
+                  imagePullPolicy: ENC[AES256_GCM,data:hfUMZp9Ds9EsEpoy,iv:bGTRd/Dl3R5Dwx/tJ31Y9EVzCwot6i27dkg5iKnDmOA=,tag:35sQ+sYsiZ34abafdEgENg==,type:str]
+                  #ENC[AES256_GCM,data:vfW9bGMzkvvx84mEIw10LyfuEciup/oenfD8Yu4+TSu7+/CYbvF7GIICKluvNjsFqs6BzWbrCHytz7F+WoRjquWwAllsY/nedS28uHLr7rlHMHansG969a8UHvwVRluuKDcSZJZx55KAW9a5JrGLdeQnB7K0JYcBH+ogtPiXIYgltiksP/IXWUz3+F35evFFpQ/X7UKQUg==,iv:7j/MJMHgMql+f/uItcPq7VAPrp1LtG5BcVjkYKyss4E=,tag:ltmkTqEzyxPuYtUvQdiXJw==,type:comment]
                  env:
-                    - name: ENC[AES256_GCM,data:SdwCQb2D+LYCNqg=,iv:mYtsjnP4W0T81Uc019Wj3AHn74WnuYN0vv7CqWpppf8=,tag:cPbc6azTbPKA9N2uXQ1b2Q==,type:str]
-                      value: ENC[AES256_GCM,data:fLDtk/6dYz7IU3N26N0078OLwJM=,iv:2Eozv+ypUWQoJnK0bma03fkg4Zu48ykOI6bq7m5OBOo=,tag:LQeBNTNANOR5/x3sUZEHIw==,type:str]
-                    - name: ENC[AES256_GCM,data:kgx68IU8I4Z5TX2Hhk6bzQ==,iv:u9DasNygpAdGnxmAnpUBfj9TXN03JfHRGmTo5+E7QAg=,tag:JDWpWzDk4D0SmwLYr+M16Q==,type:str]
-                      value: ENC[AES256_GCM,data:C9EKfnL/TuhS2K+XPA==,iv:QWIRxfAlKdeDfVIEMLLoog+V8E2jz9otBN6sDOcplrk=,tag:Om/2SgaG1sqC/jIg9gkvSw==,type:str]
-                    - name: ENC[AES256_GCM,data:FFaNaGfKSVDvoHi4WxNO0T8=,iv:JwlXk7FyaExkY7ci9m3Vj5Xh2oVWs/2jJ5ufZXJfmgE=,tag:yfRNGsynnNqhtu9+z4eJsw==,type:str]
-                      value: ENC[AES256_GCM,data:Aw==,iv:fUMaRa97oQh5o7SLdriruSZJVFfvIE+0eHYiOYK6r9c=,tag:OVJ94323ZKuvYaaEMO7QHA==,type:str]
-                    - name: ENC[AES256_GCM,data:ZZfpAGpOt2+m1/GzoKdYjBAo,iv:+ukGB5IrHwMC+YI2rXQKPY0aWyuBBcIr8nTyXmIzyUE=,tag:BN3O0DtqhodyNpIvCL9J3Q==,type:str]
-                      value: ENC[AES256_GCM,data:8AcRKCPL+xw4b3IIoNHjVb4jImd9WISH2rrwFXUfOr1xUP5Z2Xw66aSAtbXjqRf49RCvx7Bxuj1d4A==,iv:YQgWSqjvZxnlfN34a7y0El+h2tFW3hNtNufVjjQl5WU=,tag:AoMTb48NfKW4lciWABxZNA==,type:str]
-                    - name: ENC[AES256_GCM,data:SXLPblw/qwqKwVjh8OR9JtOzV0ys+IPLFtkJAt8uXw==,iv:Y+nNh2c99yzJWof4VVL/d9O/kkRADd27hotmegnxRrY=,tag:EJpvzKKo7IpsUCRXnPIkng==,type:str]
+                    - name: ENC[AES256_GCM,data:wau5wYaLRHPRrgM=,iv:oBiPLD9bFqS/ONtij5XAv3QKh9mowQauxEMF54N1vU8=,tag:DrZVp+MloHyVl9VbwowQXw==,type:str]
+                      value: ENC[AES256_GCM,data:4UrvHsdbKArswR6KjrMjaS5HYXU=,iv:5SGUmcGcEiq3r1ZObu8VTYX7YAS5/FMrjkbTX4yzrC4=,tag:Eg8p9gYfVDkCGLC/WMqlVA==,type:str]
+                    - name: ENC[AES256_GCM,data:DIl3PBHhfpgoJAcoj/yjqA==,iv:nLVzRr9koxvncUkfk39A3AcCTEe8Vr/QIMO1BIdl99I=,tag:yaQmrm/wjZ/J1HCzk1rrfQ==,type:str]
+                      value: ENC[AES256_GCM,data:FmSMbwWjSAHM/woWFg==,iv:Z05bbWSqbMP3lYA+NyY+Of57wqSbdK3alwJWKOOIzLI=,tag:Y/UPnReUP+/v6ntk1S5lfA==,type:str]
+                    - name: ENC[AES256_GCM,data:uzHqUAkCF5AtIKfEgKA76o8=,iv:Yy0QGFKpaXlMbEu4ZEwRfdS3K7jkbw1MtZYg30qmNzw=,tag:vx93cejbiRHt6lEVecMa5w==,type:str]
+                      value: ENC[AES256_GCM,data:rQ==,iv:DAVoWX4Z2SYKPwE4Zqvsd7s1g/dJwqsdIzfaxKkSxg4=,tag:0PKoU+dw7tGBeYUNqURb4A==,type:str]
+                    - name: ENC[AES256_GCM,data:GaeYQTXhJbjhk4Wy+myXSCEc,iv:ftJZC0TS9TTGjjJCe3DdNQjLqfM23JTNmAYsUocj+yg=,tag:auODWzWdiKetpx4rqVewyw==,type:str]
+                      value: ENC[AES256_GCM,data:pBFTJtAiOjvDBKXr84gHQSNnvgBxpUlzXih7ZOg7wsQsutTdfpcuBO0vGik5TyVbN94PhAvcXKXzEw==,iv:6iAOK9N42mR8j6lT5rk/PrEzisudmQm6nKZRo7t1dAg=,tag:BxuaseFDwPzKTrA9Fwbc/Q==,type:str]
+                    - name: ENC[AES256_GCM,data:GghAfApnHXlnEietiURmQzlAxhTkxjKqo+a4uBFxuQ==,iv:4h9HfWSLMfEONAFDKkYysGzb+W0xUewpYqZYMPWK4dQ=,tag:/7uspb8x+cwmH/NCY/JLgA==,type:str]
                      valueFrom:
                        secretKeyRef:
-                            name: ENC[AES256_GCM,data:GynLj5vebGn68nzuZQ==,iv:PNuztPvOrywI7kKynZjDWKV8EplBguoEW1CTBG1WPt0=,tag:2W94NXpGFPojmO/GWpWkcQ==,type:str]
-                            key: ENC[AES256_GCM,data:m3dE/O4=,iv:YETey04W9eMT7CGg88KNhX9QjDyczDpSTCEEwgOS9PQ=,tag:tGrma5l/yaKBZgWvoas13A==,type:str]
+                            name: ENC[AES256_GCM,data:cQkg+3RkD9ZOTpPZGA==,iv:uEs5WdP1J7/Qkh3rkbVoZFf5Fk87goEWlUIMUtUlVD4=,tag:AA1Kd5R0SW1fULnQ0x1kTg==,type:str]
+                            key: ENC[AES256_GCM,data:4Te0gbI=,iv:5AYOxLfvue48Ke0h2zVKF2YPZjv9qXvqUcP0VgzZEVY=,tag:roqjzrvXVkP5s6d4LIDDFQ==,type:str]
                  securityContext:
-                    privileged: ENC[AES256_GCM,data:b92iVQ==,iv:xf+Lyb9Bf95ejNlrfO66XONe7ke2iNe21+kjNSl8Y+w=,tag:CzURtTYN6YP1fzbXhNvUjw==,type:bool]
+                    privileged: ENC[AES256_GCM,data:8R/71g==,iv:XRSYmhnV0ACRf3V/OQWFIKDkZ74mBYnEmQ5tFyxL5+E=,tag:sAzQOnd6X9iDug04J5LS3A==,type:bool]
                  volumeMounts:
-                    - name: ENC[AES256_GCM,data:PJjJu5pBUIJi0fA=,iv:ZKXzuAkZYS/+zGStXsauhAlwX2wXGudxtb3n+8Qxxhg=,tag:xsqkv5E4SeHP7SZcCTqa5A==,type:str]
-                      mountPath: ENC[AES256_GCM,data:BroyvKQ=,iv:gowAK1r8XVZ3irbfqKf3BNDuo8TCU1ORwjzORufsW/Y=,tag:wGyMUCih/qRW3kIDwguA4w==,type:str]
+                    - name: ENC[AES256_GCM,data:A0emmDkIbAN0PJk=,iv:QEAS0p/qnBmKVzuQWWWBVlelP4MABpJke0bBoUCo4Gk=,tag:wuBFTo1q3l3slGkFIevAuA==,type:str]
+                      mountPath: ENC[AES256_GCM,data:erA2nbw=,iv:RMg5mxFHsgB1ROIVBPkEpOFdQByIzWNuUse9v6GGP2o=,tag:zdTMH6UD8TtP/XqVtA+f/Q==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -119,14 +119,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFNWlENTdMcFBoNFdRTTR2
-            cmlzQ2c1Q0t5dnFJK0hKT05kSm5LRVlnS1JnClVXRk0rdG9RVVdCNS9maElUWnAx
-            VUkzWXd3YkZDVjVoRDY5T0NYV1g3cWMKLS0tIDVRVXlDV2FibFE4MzZPYlp3U3Rk
-            VGsxdXdkVWNkeUh3bHVOdEJ2V0ZNc1kKj0YOwAemF711J3Kl09wIZ5D/Uca6Q/Uu
-            3n6Bl/EJLTegBcq7VkvIbuBN3Yv8ALmX0lGtEjY8OKw0laTnRhnF2w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1cERZVzZmalJLU1VlRTZC
+            cW5VdWNqQUhzNWEyaFFEWFgvajRkMTBnVXc4CmpwdHdEMnoxV1FUc3JMNDhXVlJS
+            NHdwVVhYTzNzVmcxQnVJalBZanpyb2cKLS0tICtCQXRvenhHN2VqM0l3WDNnL3Ji
+            bnN6cnpGQ0FMclB1QnF1Rm1YZEhmWFEK6dMHvnqGRoh24cCkutwVR3lfAAyWsh3t
+            bLlxS2NtKue/x/JKg0EWwPzawughs5nQJdUs9wR8HL/OytEGJcbowg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:10Z"
-    mac: ENC[AES256_GCM,data:3E7q4/UMjCOA5AxZQa5/X6CqXkzZx5uw3MjFUS5nPHmfdCmU/kcd6eDG/sigTBZjz17vWHRawCxTP/IYzamxJtOLnVHOlDjSXs2nIwicugRV4oI0MVQkWAEvjCo7zF6YRaCAivubx7vR1oi58jCtDt7Jv0Pwf2fgUdZmiPuTknw=,iv:5P/dS8qsgo/HtZGxlMrdxPHZRlUEbji7Y/lM/LDA6Jc=,tag:jgxQounEuTDeFYUXxjKIdg==,type:str]
+    lastmodified: "2025-06-29T21:30:59Z"
+    mac: ENC[AES256_GCM,data:fMHVlnfAbbIMghxsWdiuF6DsV4bP8pKzFiun2doT2fovLDiD2lqQtddOx7tmQZooTtvsDTzk9MLVlK5FkOXTpVXoZkAH/U6v0VLSRmlaf3qyFyIPj3+ox+ITJ+KRbbHK0aCa8+BbkHU8naRjk881eV2bMTN2saVQ5JbbBXCgmsM=,iv:jSPp/E4E6FVtUrmqriVCLa8kW9u2dgIsJSpOk1rRZuk=,tag:o89S9vQx2jS0SeGjakXxSA==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1