Added monitoring with Prometheus Kube stack and instructions for setting it up with Helm; WIP - need to create targeted SOPS encrypt/decrypt scripts to prevent all files showing as modified in Git history when I decrypt/encrypt the entire directory

2025-06-29 22:34:46 +01:00
parent 71bd447b78
commit c130157f2f
72 changed files with 18264 additions and 13543 deletions
@@ -4,29 +4,29 @@ metadata:
    name: registry-prod-tls
    namespace: dev-stuff
 spec:
-    secretName: ENC[AES256_GCM,data:iEd6hN35iDbHXNzfhVOINck=,iv:mY5KE+86aSp/bSK4Uk8XyoGHoHOEdsL3Z7PXmfLLgcY=,tag:sGk5BehxZqun29DZ7REK+Q==,type:str]
-    #ENC[AES256_GCM,data:SeogjQ591lg=,iv:08+b2AHHuCbMxiWfGvkkXT12W9lwjvb4+gt+keNoXoc=,tag:mo0WpqmxH0S2sc1w3Qvcbg==,type:comment]
-    duration: ENC[AES256_GCM,data:/Uw/mYo=,iv:+LH9TO8Pcrvilggi+truSqIBpbI5LtCj5xMgZcyKtxo=,tag:1CcvyhcoUjpSVUl/een8dg==,type:str]
-    #ENC[AES256_GCM,data:39fzmRcu0tc=,iv:VsVwaIhzDnpukSRm7Q1POcummZaWlSWQbSzshJkpxYk=,tag:xgFXk0VXl5RrfTfwYucl8g==,type:comment]
-    renewBefore: ENC[AES256_GCM,data:2SBW9Q==,iv:gi0M7U8Fsu8AMvGiL9XLM0TgvoImudoxE/EQGx5K18Y=,tag:UzY24BjpmO/B+4y9qw798g==,type:str]
+    secretName: ENC[AES256_GCM,data:fQ2KKnBPanDQn8rYAnrSgX0=,iv:F0gAXbVyQHzpqla3VGv0Is3JDKRnjtMnUS7DCtWkmkY=,tag:kzlWkpz0vN+RmqU83bPmVA==,type:str]
+    #ENC[AES256_GCM,data:kSTcXFphASc=,iv:rBeiIKGm+Tmc65qLwhpovikfu1HyJ2Xsvc/qP6vx2VM=,tag:pensxJ6WNIiOaZCcfn9syQ==,type:comment]
+    duration: ENC[AES256_GCM,data:47t7RvI=,iv:lIQ/ErsVCoR0qwiwtOVLYxHbscWPlBenWwi1gvHlATM=,tag:o2fdiMk2QOnTDdfJd4JKuA==,type:str]
+    #ENC[AES256_GCM,data:aN14huFpDKM=,iv:m8+JStMUf2UHai5hKsGeAvQGBGIo233vNbbUoXZmPxs=,tag:WwTuiZl9lZbq28jDjBGozw==,type:comment]
+    renewBefore: ENC[AES256_GCM,data:wNzIKw==,iv:wi3TbIpqYh9irsNYOVKi7n4gfDfwQFC3Y+GRfBkaI/I=,tag:o91Y8uBKZVVeyCpIjSd24g==,type:str]
    subject:
        organizations:
-            - ENC[AES256_GCM,data:+25j,iv:mNpd/cwn5uiNhrFOfqxTcySKCORCb4aQxtdaX9V9e3M=,tag:jEC6sJ+fyhYQliE2WDEdXw==,type:str]
-    commonName: ENC[AES256_GCM,data:PjgyNuZ9ILJpLv29g9Q51cddkfgX5Q==,iv:4ZzjFgckcTmXgbYt6/BRhbc0CwkoG1P1qfUCLI3BG5U=,tag:5na6CdFsf0A3YgraNyMTgQ==,type:str]
-    isCA: ENC[AES256_GCM,data:oQ/swYM=,iv:rlmOkvYG2ygtgTGmYw1bxYxxJB2QUVDn4SdGA8cLC48=,tag:S+3z9UyWoTeM4z6YX0pi2Q==,type:bool]
+            - ENC[AES256_GCM,data:es9R,iv:R8rJB+V14yv4Igz9w5KW7TDhtBvVXpAa+EI7Bbizlnc=,tag:s+0GpuoXrt8KDZiOcpTS5w==,type:str]
+    commonName: ENC[AES256_GCM,data:1l/pmTNq3uYEtqJY7dDpQOKRbPZ4ow==,iv:SUH7CtKBVM/3Yj64g3IpCPsl6yOTQBnXh/K4o7QX4YA=,tag:wo3SJofQLeSamdwcIxfg1g==,type:str]
+    isCA: ENC[AES256_GCM,data:c3nfRRs=,iv:9MMT98s7M+igftq4sz4NBtWrnXb/qrGCgaZZREDE+qY=,tag:MhIPlFAeXHaSMfofZT3IBA==,type:bool]
    privateKey:
-        algorithm: ENC[AES256_GCM,data:3pHV,iv:W0w9X+JlXZPUufRcnSdHh4vKH51XDxcqIs242FxC1Eg=,tag:YzNQiTE7PtSM5sxhtGuCbg==,type:str]
-        encoding: ENC[AES256_GCM,data:LwLe1Hs=,iv:ZLDAUE3J0QsNVOsKB62qMp+O3yAHN+QZti2Z8yT0reA=,tag:kmMrRp6dk57LxtujTEqaUg==,type:str]
-        size: ENC[AES256_GCM,data:RKNQ/g==,iv:g3m7b3TBAJ+plWrpoPddtot5Ab1BO6WBkne1Vh83OxA=,tag:NWbgwLSSIS0g1m0ZEPip4w==,type:int]
+        algorithm: ENC[AES256_GCM,data:Zg+K,iv:HfC5tEXz4kxLM5UdbKMYby5uK82+gtTaU4OeAjuWHjQ=,tag:ji8l0sc1O6eSDlxZEj3TAQ==,type:str]
+        encoding: ENC[AES256_GCM,data:DnLrRnI=,iv:UZ3A2EGeUxDRHpnXDoQkhPZhq3VKs6V+F+QzRKf+JXo=,tag:ForMiBtMw2p8yNLceEKUtA==,type:str]
+        size: ENC[AES256_GCM,data:kxUMAQ==,iv:B4RblvF8nNpw2zE4aU3TB/LHf2VrOlD84zlsszkTx5g=,tag:tSbZYOGreV2otQ3W30G11g==,type:int]
    usages:
-        - ENC[AES256_GCM,data:nla3zEKpRr03ZUk=,iv:OeIiMv+h5kfsdkN+mOT0wJqqOMiUdBdsDncl1TrXTtk=,tag:yNTWJH9bDa7Ata9lbTvWqw==,type:str]
-        - ENC[AES256_GCM,data:l/FAd/EtVaFKf8E=,iv:B6N8hyVTnDK9frUbiJ1FWB5mmhxGb7+ssT+u5OZ6uUs=,tag:FyOircmAxXd/BUGcsW47TA==,type:str]
+        - ENC[AES256_GCM,data:JnZxA6KfkY2eVcI=,iv:KLSHb0QFk5mXSZHU0z7p4aH+atgbZ/+Owurc9qZ7h68=,tag:aV4if6UlYGSowYsUT4pmjQ==,type:str]
+        - ENC[AES256_GCM,data:Q3xwXLKkX9bydAs=,iv:C9wmhTxppu2hUk6jMWzQTFRaa0t8d8+ZKMZGAu1YZD4=,tag:S7xE0lmokrDNKtjpdLWIoA==,type:str]
    dnsNames:
-        - ENC[AES256_GCM,data:1f0Zoh+DenYDxXGHWId0LbCX9CPYkw==,iv:wKxxiLtDIjHCBXwSGvRus9w+eSbx9xnmHm4aeAJ2uuc=,tag:XuvdkcXVzkjKC0yD/dgoog==,type:str]
+        - ENC[AES256_GCM,data:cvD5k9ToKOpyuEfhlSqb5wE/r0SCRA==,iv:BQ6W7WhHtWXlwwgqyjnyHpIBAHgY84K86peZefBpHVM=,tag:zkenQTKUoeKqC+XViV06bg==,type:str]
    issuerRef:
-        name: ENC[AES256_GCM,data:wZr05lLchcwEoKhHWsBC+A==,iv:hBO84TFMb35qNBAmutAYHoCcoPvhtHyVPXL4l8TjcHA=,tag:SJltMjkQU1Fw9iiUT2IPKw==,type:str]
+        name: ENC[AES256_GCM,data:Z/eVwkTpKKfJiG6aaLdBVw==,iv:EnWHC4dkd94QK/DgOh0W91Ner/ay+Oeq6kDyPjTBLF8=,tag:1N++l6lvcq17BB6gwHLAag==,type:str]
        kind: ClusterIssuer
-        group: ENC[AES256_GCM,data:KelBr8Gm3fpWecYAvedQ,iv:sScX646u+wcWKxWNDEVPKMXmo5LD+uXUciFq3uZpmlg=,tag:9JOotUQGD2BqX4dAdkaiXQ==,type:str]
+        group: ENC[AES256_GCM,data:ItAibDIFskrqYsrC7Z7v,iv:zN/whw+vs9vdmWL1zMmkL/CgU9ptqt9V48okFTbNv1E=,tag:RJI6oESkj/chY4UoYd+7zw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -36,14 +36,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4VzFmQ01IWXFnTXZMWHZZ
-            TWFzd2xKMHRxclpheG9ZTll5Q1cwTHFPNVJzCkxXSXRlSDZuVnlQSDBOckNLRmp3
-            SGdkRG1yNjNQS0QvVzNuYVJpZXZIYm8KLS0tIFkzZHlYNlNyaHZ5V2RkN2FtdkdG
-            V3cvakRpbE80d3ZRMmtVdmg0VlBqRncKmPZRkKBRgwlYFDDMKpOCrGKWIKtlkbZK
-            iLXw9hkdBA4xYDnzETnzwubc8qwars6N9WncU+0dx2f3lBpYWLncmg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlU296Skg0NzkrM1R4M09D
+            ZnNtNVh2WG00U1lOaGhMUVpYQ1laOEVRUTBNCmgya3M3enJjRm80WHdydVh6OUVm
+            NzdWR0NzN2ZEOFBYUG95WlBKM05ZTUkKLS0tIFk3Znk3WGxnRjZpejFFRGFOTVhh
+            Q3hvK2JpUVhHbjBTVmRsSnpycWRHMWcKGvwJ+lktYqWGPlPmMAkTMMwMF9dEg0HS
+            FUvbSlUifQdbJixnV2qY3j90MRlcMPFG1V7YzCmqDHgNHW8jbrsJNg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:09Z"
-    mac: ENC[AES256_GCM,data:G5c/8nEokPgo7g8IurCGQ/yn8jmBUf6P1HS4EQBAkpsZfECea3J270ssm0+V+Z0S0tdf5MLckO61tpnOYfV7CjbzviAQk9guPJEAlTy1fk+1WtUOJJzX+9WVPl1Gmd845/Sy7ub+XAgrlsuYRJqaqjzpPw7nrG2gXySxIaGK/7o=,iv:8u3EdeojeNcEkO593Y6No9wvieqMAp6MhctaZGlY+0Y=,tag:XhOJ6r7z0f6wWpBImLCfOA==,type:str]
+    lastmodified: "2025-06-29T21:30:59Z"
+    mac: ENC[AES256_GCM,data:XkuOOlptSqmd+ZyFKyaQaI2qR49Lex2/4Fqx8ZB7vwLBBePn20rWJRvDU5yRlG1Ydt10UtL0VoDwmxB3cf3Bdg7nfejEpeCkcdJseSAPszAINgcGaPrvJ54SsKFAUV5RYdui4Y8/3lLOOXCfuNjL6cowsOFx8HONs3XfTGo4jho=,iv:lN1FLN8lYfy35PjNtKa1ZGEdlm4jsnkNPlzM5cVeXzI=,tag:wdePY93T0s2wqHf6/aHrFA==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -54,12 +54,12 @@ metadata:
    name: container-registry-pvc
    namespace: dev-stuff
 spec:
-    storageClassName: ENC[AES256_GCM,data:6koCjBH8zfYonQ==,iv:rwaQUk1CoFnr2vF4hUwxHOAZvavxFPoa2OFuwMOPRDc=,tag:fpX86o6C18c5dL1ONi4Q5Q==,type:str]
+    storageClassName: ENC[AES256_GCM,data:kQDyAFCPls0Pig==,iv:W1SWgM3KcdmGAtpe5v3G5219uz3U04osvVWH7WKoTW0=,tag:Ir+k0mxfxFmUXblP6tYs/g==,type:str]
    accessModes:
-        - ENC[AES256_GCM,data:XdiNwZTJEf46W5FxHA==,iv:bTXoU3c6J2sl6xBg7ojvUCiwZ8q7LSMWDXQEXe0pSuc=,tag:E3mKCg/ZK6a8BMc6yebWYg==,type:str]
+        - ENC[AES256_GCM,data:wWSTTMNNwH1+DLPFYg==,iv:zTii5P/er/df//2n5tu4TFJm7KAUucPmeDpJsUchnJ4=,tag:xxYzzTiQt1L4ePbVVAs6VA==,type:str]
    resources:
        requests:
-            storage: ENC[AES256_GCM,data:R37g5w==,iv:99tyqeM8yKV5O0tNV1SKVnA1XNQz3qpHMOkT9yUH8dQ=,tag:I3nCAwghQBNQgmTEGPOXvA==,type:str]
+            storage: ENC[AES256_GCM,data:KB9eaA==,iv:v+SRkhxtaQZJn9PG4hhlE1P2ho91PEL+g44PcAJXro0=,tag:ZhYOpFbNdpWS6Gr4bLrVhw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -69,14 +69,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4VzFmQ01IWXFnTXZMWHZZ
-            TWFzd2xKMHRxclpheG9ZTll5Q1cwTHFPNVJzCkxXSXRlSDZuVnlQSDBOckNLRmp3
-            SGdkRG1yNjNQS0QvVzNuYVJpZXZIYm8KLS0tIFkzZHlYNlNyaHZ5V2RkN2FtdkdG
-            V3cvakRpbE80d3ZRMmtVdmg0VlBqRncKmPZRkKBRgwlYFDDMKpOCrGKWIKtlkbZK
-            iLXw9hkdBA4xYDnzETnzwubc8qwars6N9WncU+0dx2f3lBpYWLncmg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlU296Skg0NzkrM1R4M09D
+            ZnNtNVh2WG00U1lOaGhMUVpYQ1laOEVRUTBNCmgya3M3enJjRm80WHdydVh6OUVm
+            NzdWR0NzN2ZEOFBYUG95WlBKM05ZTUkKLS0tIFk3Znk3WGxnRjZpejFFRGFOTVhh
+            Q3hvK2JpUVhHbjBTVmRsSnpycWRHMWcKGvwJ+lktYqWGPlPmMAkTMMwMF9dEg0HS
+            FUvbSlUifQdbJixnV2qY3j90MRlcMPFG1V7YzCmqDHgNHW8jbrsJNg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:09Z"
-    mac: ENC[AES256_GCM,data:G5c/8nEokPgo7g8IurCGQ/yn8jmBUf6P1HS4EQBAkpsZfECea3J270ssm0+V+Z0S0tdf5MLckO61tpnOYfV7CjbzviAQk9guPJEAlTy1fk+1WtUOJJzX+9WVPl1Gmd845/Sy7ub+XAgrlsuYRJqaqjzpPw7nrG2gXySxIaGK/7o=,iv:8u3EdeojeNcEkO593Y6No9wvieqMAp6MhctaZGlY+0Y=,tag:XhOJ6r7z0f6wWpBImLCfOA==,type:str]
+    lastmodified: "2025-06-29T21:30:59Z"
+    mac: ENC[AES256_GCM,data:XkuOOlptSqmd+ZyFKyaQaI2qR49Lex2/4Fqx8ZB7vwLBBePn20rWJRvDU5yRlG1Ydt10UtL0VoDwmxB3cf3Bdg7nfejEpeCkcdJseSAPszAINgcGaPrvJ54SsKFAUV5RYdui4Y8/3lLOOXCfuNjL6cowsOFx8HONs3XfTGo4jho=,iv:lN1FLN8lYfy35PjNtKa1ZGEdlm4jsnkNPlzM5cVeXzI=,tag:wdePY93T0s2wqHf6/aHrFA==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -92,13 +92,13 @@ metadata:
        metallb.universe.tf/allow-shared-ip: internal
 spec:
    type: LoadBalancer
-    loadBalancerIP: ENC[AES256_GCM,data:KkaiCzO2gxOfYFtBiA==,iv:UP+o5XrlwRzfpFp/V7WjTwEKyLUU5aSvDV+AEeIsodE=,tag:Q54+2/rlyZAx4oOlX1zpdw==,type:str]
+    loadBalancerIP: ENC[AES256_GCM,data:60y0WBtBNXl4WOC44Q==,iv:PGqeDSLCxff2SW+IOVMPXxYrXsQkmWtA7T71OAX0bf4=,tag:pramPd9DBfhsQXfnh9wBGw==,type:str]
    ports:
-        - port: ENC[AES256_GCM,data:/EnHEQ==,iv:X7hCNRX9HZCuFXXGrFshlNGklQUB7sgMhTMklDfTXKc=,tag:5mOlo15E55eG6bFxvmzdsA==,type:int]
-          protocol: ENC[AES256_GCM,data:NSDi,iv:QnhRuO29A7lSGrhoG+bonM+nxoEc1yMqaGZ5nCA2HSM=,tag:e8HWJ6zbaALC2lYKh+3vjg==,type:str]
-          targetPort: ENC[AES256_GCM,data:qGEWKg==,iv:WNZyyLZUAm/pp/ZBPPsyD6z4oyD5aLXTcuNy080xO7o=,tag:ntDhBmX+hXC6zFI27dXQpQ==,type:int]
+        - port: ENC[AES256_GCM,data:/rl7Dw==,iv:NXenIQmBRp98cVUYq4AGAXr+Vx0hjZftS91tykS/ShU=,tag:CAqw8s9wgxyr6ux82QGTLA==,type:int]
+          protocol: ENC[AES256_GCM,data:7JW8,iv:NbXl0mSftKC/6h4MEUHwbsIpI2lSBHKuzs349BCq1L0=,tag:SP+LyyskJbX/M6fMG8JFtQ==,type:str]
+          targetPort: ENC[AES256_GCM,data:kST31g==,iv:jIW7+ZJDUgaW8McbQc8KnlW23hf+SoMqZ05g14k4X2c=,tag:w6S474cMXSs6ZdbyVLduyg==,type:int]
    selector:
-        app: ENC[AES256_GCM,data:+rNrA4iv/A4fanaqoz2VcMPi,iv:SbqiYXTc4ysVMmYC69eAqQQKs1Xnoy7wZQAXB1fbzuU=,tag:VhpI5K82KmICmi4Aqueoug==,type:str]
+        app: ENC[AES256_GCM,data:AGtSv4CW7kW5cnV3OYhmmzcQ,iv:nexxOxJB6r4MwqjY/qjiMAlGxPFqiXVTFBzQrDt3n+8=,tag:ts7X9lvSL/I+8Hfx4GDI/Q==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -108,14 +108,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4VzFmQ01IWXFnTXZMWHZZ
-            TWFzd2xKMHRxclpheG9ZTll5Q1cwTHFPNVJzCkxXSXRlSDZuVnlQSDBOckNLRmp3
-            SGdkRG1yNjNQS0QvVzNuYVJpZXZIYm8KLS0tIFkzZHlYNlNyaHZ5V2RkN2FtdkdG
-            V3cvakRpbE80d3ZRMmtVdmg0VlBqRncKmPZRkKBRgwlYFDDMKpOCrGKWIKtlkbZK
-            iLXw9hkdBA4xYDnzETnzwubc8qwars6N9WncU+0dx2f3lBpYWLncmg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlU296Skg0NzkrM1R4M09D
+            ZnNtNVh2WG00U1lOaGhMUVpYQ1laOEVRUTBNCmgya3M3enJjRm80WHdydVh6OUVm
+            NzdWR0NzN2ZEOFBYUG95WlBKM05ZTUkKLS0tIFk3Znk3WGxnRjZpejFFRGFOTVhh
+            Q3hvK2JpUVhHbjBTVmRsSnpycWRHMWcKGvwJ+lktYqWGPlPmMAkTMMwMF9dEg0HS
+            FUvbSlUifQdbJixnV2qY3j90MRlcMPFG1V7YzCmqDHgNHW8jbrsJNg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:09Z"
-    mac: ENC[AES256_GCM,data:G5c/8nEokPgo7g8IurCGQ/yn8jmBUf6P1HS4EQBAkpsZfECea3J270ssm0+V+Z0S0tdf5MLckO61tpnOYfV7CjbzviAQk9guPJEAlTy1fk+1WtUOJJzX+9WVPl1Gmd845/Sy7ub+XAgrlsuYRJqaqjzpPw7nrG2gXySxIaGK/7o=,iv:8u3EdeojeNcEkO593Y6No9wvieqMAp6MhctaZGlY+0Y=,tag:XhOJ6r7z0f6wWpBImLCfOA==,type:str]
+    lastmodified: "2025-06-29T21:30:59Z"
+    mac: ENC[AES256_GCM,data:XkuOOlptSqmd+ZyFKyaQaI2qR49Lex2/4Fqx8ZB7vwLBBePn20rWJRvDU5yRlG1Ydt10UtL0VoDwmxB3cf3Bdg7nfejEpeCkcdJseSAPszAINgcGaPrvJ54SsKFAUV5RYdui4Y8/3lLOOXCfuNjL6cowsOFx8HONs3XfTGo4jho=,iv:lN1FLN8lYfy35PjNtKa1ZGEdlm4jsnkNPlzM5cVeXzI=,tag:wdePY93T0s2wqHf6/aHrFA==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1
@@ -128,10 +128,10 @@ metadata:
    labels:
        app: container-registry
 spec:
-    replicas: ENC[AES256_GCM,data:tQ==,iv:1zWa6py3DLyixe8GXOStJ31OdEA3B/m9E7CByoW2atk=,tag:taPbXAn+jQhkl94AZGZphA==,type:int]
+    replicas: ENC[AES256_GCM,data:0Q==,iv:2GTSXwx0ax1i6NV4yYhylIbvVnXHcsfUeusvObymPrM=,tag:IMsIpsFhMNiPRhn+IEvRlQ==,type:int]
    selector:
        matchLabels:
-            app: ENC[AES256_GCM,data:OZ1lxFiwt3iNUW5VsG774Na7,iv:dQasyvWB/AL1WDA2vHU2tTBSs24MfblieXPZKaZikAk=,tag:HW5mMffmnhxs0jtAhE080Q==,type:str]
+            app: ENC[AES256_GCM,data:xJLcSADfPV0t4B0otF3hHXPz,iv:eUbfvk5S/56Npw6q2j8V/EYlfSKaauIOBEcLtHhmjcI=,tag:yra6a4cdJbKiUZHypMFJFA==,type:str]
    template:
        metadata:
            labels:
@@ -139,41 +139,41 @@ spec:
                name: container-registry
        spec:
            containers:
-                - name: ENC[AES256_GCM,data:UT3k5Ug1KYU=,iv:JYUCH1bWsOxctclm3FhDlIPFS23nWJyExP8t+b9+xEU=,tag:PBTBFWDVQjYaYEDhhDkBaQ==,type:str]
-                  image: ENC[AES256_GCM,data:hVTrgA/qutFMzT9L,iv:PCZz3l+NTqEDn19CmSysmxnYrKV+D8sp/oYfAC2hCsU=,tag:uOKkW8enQKM9wYmEK+P34Q==,type:str]
+                - name: ENC[AES256_GCM,data:tCVuDhh6ovA=,iv:vK29NLNMJYQprsqnT1p+RVjzVKwol6r+2On4/PZxSns=,tag:ZJcdx6u7a2gf6+vW96SHmQ==,type:str]
+                  image: ENC[AES256_GCM,data:a/TTbgYPLZhyEY6m,iv:fQRBwR76IvZJ+lNdE3hx66rn+pmJ7TxcSujD7odwbLQ=,tag:xY93yWDDlabXl3/Giil+Tw==,type:str]
                  env:
-                    - name: ENC[AES256_GCM,data:JTgptv6Azh3u+GcL2A==,iv:AeBZ3SKk9woDHnTj7jkdOgMOoXD7h2c3Tf218vJhfTQ=,tag:i1trEiIVEGN2FTsCypeTUQ==,type:str]
-                      value: ENC[AES256_GCM,data:eJ7KqH/72qs=,iv:oxrBhovHcEiVD2H2I2shRg8CLl+KoLrpVUrU4zL4vJY=,tag:UMRNEqWA4tseZyJMR0QHRw==,type:str]
-                    - name: ENC[AES256_GCM,data:UoiYTBymf6s5Uo/vVKMXuP5CcvdmrPJUzVs/qg==,iv:vZBbuNZK315kv5lKP6uQ3xwzGbnJNSrIk4Vr/AEvd2c=,tag:9fchp78teBvE/yjE3pOA4A==,type:str]
-                      value: ENC[AES256_GCM,data:iTlf6mPMG+URMuza1Tg=,iv:NgEnEas6owBVjupUcnGLeW7j+pHKJPDWC89ksJnPo34=,tag:fgZiFHdxRiX1TDGi8U5h0A==,type:str]
-                    - name: ENC[AES256_GCM,data:ksKXGkAI82Vgti2FFSOHa9pJTe+rR1pTD6p6,iv:riXz6cKKYU6lG9iUZ502oUtm1ndztyoWt6mqY7FIoQI=,tag:sOK5g/MIePnA0pORu+hJeQ==,type:str]
-                      value: ENC[AES256_GCM,data:gWaRXii9wUjI2uCzJAA=,iv:9V5DTqsV5POryL9xSXAw+a//J7jOV1bYO2a/FapuYps=,tag:ZVL7AGeSdn0rrpgLumqDlQ==,type:str]
-                    - name: ENC[AES256_GCM,data:PrG/4MrMJisb4hTNq8Ds8ujEv+yC,iv:D6UZNJAnTXOYeiqWKYkmK3lGUht6Fd67YBh8C4Q4TP0=,tag:pQXb3cXWrtRE5hStrzg0/Q==,type:str]
-                      value: ENC[AES256_GCM,data:Vq9oS+hwYtRwoCQZHYGadg==,iv:RrLCZLC4a2uHL64Mc8CYZIcoa3z6i6ZN6Jq+ML/h48I=,tag:oUrESAnRqRytPfySvpj3ig==,type:str]
-                    - name: ENC[AES256_GCM,data:P7idw3OyZeOUfOdL4WOfx6+izr1g/57O5kQIM4A=,iv:BW0Hal7L+GdN6ZbtDHMiNY+82mqHmv1cOSmH/xmbSVY=,tag:nGzQSsc4SY3Gt+/pmEiZwQ==,type:str]
-                      value: ENC[AES256_GCM,data:4RcwuLXA64VYOF4/Xf4w1A==,iv:g0VeM59liOYuMTrqHqXbLTLNa7gduj0ft8jEJ0ftOMc=,tag:qcRjaAprpE8Zum2DX4vHkg==,type:str]
-                    - name: ENC[AES256_GCM,data:yJmNl6u5ULoVLU7NEGZmU5NU,iv:lUi0r1o20eiC8hLi83PY/TZjWuHP0OVW1RHSY11w3n8=,tag:7YDh96sg+vJLF8ygtdoh3A==,type:str]
-                      value: ENC[AES256_GCM,data:bfg1wrVPHw7tP4tmT6doFbNsIQkkJK/6Cu86zbU62XmnJog=,iv:ydq37Q1w0FzGB3mPaluRPKZMwVsfuisMARFfyTn2f+4=,tag:GUFJDkT9usmyRYjlCTYLmA==,type:str]
+                    - name: ENC[AES256_GCM,data:dR7H+x7xVH4EGfKBxA==,iv:A9Zqsatb1bITZtSbzMjyo2Dy2aAIbA2x3c/yYzqXyv0=,tag:HZaFK5H7I3hb6m0Qyoi3Cg==,type:str]
+                      value: ENC[AES256_GCM,data:D9CwOjxSrEo=,iv:Vs3dUwf4xYC7lK/0XDw/5RsEFtU/w3WqQI1yXmXjyCI=,tag:9+t8371S10siXIe+jEylHA==,type:str]
+                    - name: ENC[AES256_GCM,data:CyjZQdedmJ9o5dQjCO+XglbHsg8J+oDOzUY33w==,iv:n0m5q1V03kKtgKIpu2y3wO7jk+S/3wXNfnDbjNyu5Jk=,tag:OS91iEgAVRekIaXbEc/HCw==,type:str]
+                      value: ENC[AES256_GCM,data:lFfCry77A90CB/onMHE=,iv:8+wbtngqMmRDcaRRigWhh1lv1KsdX+GV6eux86xHh3U=,tag:23o4j1bspPV5uvkGNsGqTw==,type:str]
+                    - name: ENC[AES256_GCM,data:CajSbJsfMH5qtardR73z6o7R6yADfYp1aNev,iv:c6s/PSLdNM/DHA8GkDwc/EMQOqzfrnWR2L6BmerjBH0=,tag:mH5Am9VsbkSr2NXqcd7ZNw==,type:str]
+                      value: ENC[AES256_GCM,data:wZl9WGEg2zYXbeEmzV4=,iv:E3uTFl04hXgld4rWOxqOiUu3zPD8mc3GMIGlogP65j0=,tag:J6MtZ3FANe2iHiotSSR2sA==,type:str]
+                    - name: ENC[AES256_GCM,data:0hCcp8Vdk/mPjsfZnRNTBC/vz+/9,iv:Xtmm72ec8tvryo7u4BAu7/876JUD1wANsVv25UGZbkc=,tag:AB0qCO48wUUkS6+WawNhng==,type:str]
+                      value: ENC[AES256_GCM,data:mL3LxUpcSiDVJFeuk6wB4A==,iv:qWZpraVfPGpXPMPT6LhDIwKZqGw1gAxPgqnXh6fSwOE=,tag:bj5xee6YejYW0jhjbFiy9Q==,type:str]
+                    - name: ENC[AES256_GCM,data:0ksAMr5iu6WonCmFS3EHQ6LWpbPkOuM+KqqwS0o=,iv:+CgwaYnopIzS8GeWFJ/5X/2DS77rR9t7ZJv7o/UXS3M=,tag:oUzeMmLm9CjNXNanof2qIw==,type:str]
+                      value: ENC[AES256_GCM,data:qILd0WdziSgKGbnkSndIBg==,iv:KRvA5uEJayG4RexdeqyBtv3oCpN8JDQlFFHApJ6Rjhc=,tag:RFcj2yC2D29+EdusdDWSdg==,type:str]
+                    - name: ENC[AES256_GCM,data:QHmsOYnln7kbEC8KcogaMNfy,iv:7zrG3sicIwDDh17noXOM5kCTSIn/djkvko9HM9qByFE=,tag:vlfbYZHie951GLsmiKfDZw==,type:str]
+                      value: ENC[AES256_GCM,data:sCJJNQxvUV2IeIK7OjRq2RykEBxCcQJCOMM/p3QA2orEBOw=,iv:e3vGUD1adHLuTOHfWxVnwiPtqDf7kuExCU6LwvYC6qU=,tag:veOke5fAFiQS3bLBA9g+KA==,type:str]
                  ports:
-                    - containerPort: ENC[AES256_GCM,data:dHYNuQ==,iv:NuhAQBePSGoNeYv3Tx3EYBSuxeEJ0XK7BADH1soTKKE=,tag:v9KOS7RgFbfDl9XE00Uw5A==,type:int]
+                    - containerPort: ENC[AES256_GCM,data:UKOGsQ==,iv:D3uS21VtaUfqYzhbhXuy7EHn0kEyl9CVA1mBKkObKMw=,tag:c+gSiFqgG2x6Td4Tt9I1rw==,type:int]
                  volumeMounts:
-                    - name: ENC[AES256_GCM,data:ldtqB3v3N/y7UA5n,iv:4KyLYeQd2jxSqdm0Wn7P3xHr1AUTD/DIcjmMxfGKuuo=,tag:GwsF7AaD0pK+bXJZMRBIsw==,type:str]
-                      mountPath: ENC[AES256_GCM,data:mWBQBYyOBJYDFvpLtczG2To=,iv:VLV45yzQ9Pty+hA4z4Sd1n19v8aNlcxuB7pdjlgR2h8=,tag:fb8jQbzPvO/jMgKSJvW1gQ==,type:str]
-                    - name: ENC[AES256_GCM,data:m7n+PW2ZRMIkNHo24ve0A2Q=,iv:kRdLawm2lLWUl37O5hofgOaIrMrho6/imm33DOhFIRo=,tag:NCmt8ezARcWIL+PTIJwfcQ==,type:str]
-                      mountPath: ENC[AES256_GCM,data:HSiB+gJcqEs=,iv:sWUDFEbaEiOxQZu0lZQemnFsx+uHvhOk69YDZqNkr6o=,tag:IaonImOohDGKSJdMU4GYOA==,type:str]
-                    - name: ENC[AES256_GCM,data:jUF3V4tHlN0sJt2BBw==,iv:NY8hPWdvMaZ93mOK+ZyDE7gYnLF28LHJdxHujbx8oZM=,tag:Y9zA0HQ0GUPBPbUvvHl75Q==,type:str]
-                      mountPath: ENC[AES256_GCM,data:KpIyYk8=,iv:Qcvmvb2kYie7UYOReX6KTCHPdhiyguXAjAAJXwA9CQ4=,tag:pg86Pm/oz7bDNEvufi4MAQ==,type:str]
+                    - name: ENC[AES256_GCM,data:jhmSr3sCjC26DRti,iv:5d4rV8DWxl+2bP1r/It0XhoxugIwkjjJ9gLZVOXLjek=,tag:AHJ5mQP/qrzSXuYKCKk9Nw==,type:str]
+                      mountPath: ENC[AES256_GCM,data:Lini8cJlrVjl0ihw89BN0tk=,iv:868In7xgxXZ0JKPqbHxG40/0MIzYqUmCad9QlZreYMA=,tag:dT61yLuLacs8HSLoPKI2+g==,type:str]
+                    - name: ENC[AES256_GCM,data:GFB4BFIp/KmyLG7SVwhA780=,iv:lyRoIjjzBzsrJy3uABYgvkrwBhOmiXDVkAxujGvoF54=,tag:G5GJ7o4OP6gkjq2kPGH/og==,type:str]
+                      mountPath: ENC[AES256_GCM,data:XcThw65xFAc=,iv:h++fsXgPA7oaE7S/2ktUbuSqvvzmNMTVKX4Bnikw4OI=,tag:ofXoHXRODWquwrvUKiUHpQ==,type:str]
+                    - name: ENC[AES256_GCM,data:0XjENbbQCQH6sh+J3w==,iv:ZE4/1egfFICFJEjIU2FUksIuc/5iWsG22qMUZ5Zw/uU=,tag:xXduG3DtUMkiBvrSkDnc/g==,type:str]
+                      mountPath: ENC[AES256_GCM,data:BAUEcFI=,iv:ymX1FJxeKyYl2K6XlYjWuF0yarb2JNTb7bBED/fxBRc=,tag:Zs3XeTK+WkRDjxjeybjLCA==,type:str]
                  resources: {}
            volumes:
-                - name: ENC[AES256_GCM,data:8+TqqYkBHtyrrvIE,iv:1bbtzcFdv1wMg2y1t+EwL4ZqP6zlnLtKRU3lVFxU12Q=,tag:xdSxyILl4LiT/Y9Mp/sCLA==,type:str]
+                - name: ENC[AES256_GCM,data:0CzEvq7zjRuC0QZs,iv:Ppyld2M+fwhoOn+3mqeO2tqQhiwcEkf7olMIlH87VYw=,tag:csiQcnYlzJlUU8he8b6VLA==,type:str]
                  persistentVolumeClaim:
-                    claimName: ENC[AES256_GCM,data:WEk1k9hEZFbg+r/LE7FnXIQr62Vn9g==,iv:4oyrYl0ReVwi5DnmBDsmBrFcGFLqOBrO3eAL2ONn6Is=,tag:L8XCRehImGvkB5RwWlNW+w==,type:str]
-                - name: ENC[AES256_GCM,data:/Ok3PJBpZzt2kdaJOw4XpX8=,iv:35sdMrIGmBQLoJdZOY84TctHwDhlLYzj2PdW/TximsI=,tag:zwq8rBx6d6rgqd4hUhiv2g==,type:str]
+                    claimName: ENC[AES256_GCM,data:fsc8ZyhTZgdreTOGzHxK4pC7JRXarQ==,iv:QOOcmTkHY9xQ2pSDBpfWp2fXZtf+mXMxrdTyy5UQ03A=,tag:xEjKif0GhhjgdQcunS80Lg==,type:str]
+                - name: ENC[AES256_GCM,data:jRv+Vc4gobJqmdpUdPBt4R4=,iv:GEjjPygQX/CBaEPmX5kRkjW5oG45vjAvLgiqcF80+ns=,tag:m1qZ3i83aGI4dGVrURvkYQ==,type:str]
                  secret:
-                    secretName: ENC[AES256_GCM,data:pD0WKseXfRmTS2IhKvuAVdw=,iv:OHn4hwoQluVOKOUcva+vIQGV/kvKtA6SPBZnRABP2KQ=,tag:xDjY6fZs+zycXNqiHAIKVQ==,type:str]
-                - name: ENC[AES256_GCM,data:xH7GVEov9M/YmVqx1w==,iv:LCV6CXD2b2ZSaXU/13mFblfPocUoh3hvNWu5rrNkC8U=,tag:EZ1mELCCYiprLjZmQ/a3wg==,type:str]
+                    secretName: ENC[AES256_GCM,data:iYjfbNBDDXtz91eKbvlx5wE=,iv:1ala6Nr+yOu7R1/yJiFrASJrt+5i5mBAeIOi0R5xxw8=,tag:yLkwR4ErelLI6d3Gssn2pA==,type:str]
+                - name: ENC[AES256_GCM,data:yBOXb6ujuFCZye7cag==,iv:oMnTotAhfQ4vAYLTpvRGa7CWTWd9iNmqSpRepDPY39k=,tag:3qIkL4b+WFWDw9Um6WRhrg==,type:str]
                  secret:
-                    secretName: ENC[AES256_GCM,data:lhOhy/LkwgbB5wp6EA==,iv:IymQ+veIrH4g43yllQhJiu1K6XYTMmABIim0H3qgxOs=,tag:o3+L6cR7XMDrP4QKqdqHBw==,type:str]
+                    secretName: ENC[AES256_GCM,data:H6fBVyD7kljw4ZnQUA==,iv:NJ4lt37mCOUs6eo2SWvuYfBDFciQyWNjzMDBMniUIQc=,tag:fNEBktCp8pcm1Koi93uYvw==,type:str]
 sops:
    kms: []
    gcp_kms: []
@@ -183,14 +183,14 @@ sops:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4VzFmQ01IWXFnTXZMWHZZ
-            TWFzd2xKMHRxclpheG9ZTll5Q1cwTHFPNVJzCkxXSXRlSDZuVnlQSDBOckNLRmp3
-            SGdkRG1yNjNQS0QvVzNuYVJpZXZIYm8KLS0tIFkzZHlYNlNyaHZ5V2RkN2FtdkdG
-            V3cvakRpbE80d3ZRMmtVdmg0VlBqRncKmPZRkKBRgwlYFDDMKpOCrGKWIKtlkbZK
-            iLXw9hkdBA4xYDnzETnzwubc8qwars6N9WncU+0dx2f3lBpYWLncmg==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlU296Skg0NzkrM1R4M09D
+            ZnNtNVh2WG00U1lOaGhMUVpYQ1laOEVRUTBNCmgya3M3enJjRm80WHdydVh6OUVm
+            NzdWR0NzN2ZEOFBYUG95WlBKM05ZTUkKLS0tIFk3Znk3WGxnRjZpejFFRGFOTVhh
+            Q3hvK2JpUVhHbjBTVmRsSnpycWRHMWcKGvwJ+lktYqWGPlPmMAkTMMwMF9dEg0HS
+            FUvbSlUifQdbJixnV2qY3j90MRlcMPFG1V7YzCmqDHgNHW8jbrsJNg==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:34:09Z"
-    mac: ENC[AES256_GCM,data:G5c/8nEokPgo7g8IurCGQ/yn8jmBUf6P1HS4EQBAkpsZfECea3J270ssm0+V+Z0S0tdf5MLckO61tpnOYfV7CjbzviAQk9guPJEAlTy1fk+1WtUOJJzX+9WVPl1Gmd845/Sy7ub+XAgrlsuYRJqaqjzpPw7nrG2gXySxIaGK/7o=,iv:8u3EdeojeNcEkO593Y6No9wvieqMAp6MhctaZGlY+0Y=,tag:XhOJ6r7z0f6wWpBImLCfOA==,type:str]
+    lastmodified: "2025-06-29T21:30:59Z"
+    mac: ENC[AES256_GCM,data:XkuOOlptSqmd+ZyFKyaQaI2qR49Lex2/4Fqx8ZB7vwLBBePn20rWJRvDU5yRlG1Ydt10UtL0VoDwmxB3cf3Bdg7nfejEpeCkcdJseSAPszAINgcGaPrvJ54SsKFAUV5RYdui4Y8/3lLOOXCfuNjL6cowsOFx8HONs3XfTGo4jho=,iv:lN1FLN8lYfy35PjNtKa1ZGEdlm4jsnkNPlzM5cVeXzI=,tag:wdePY93T0s2wqHf6/aHrFA==,type:str]
    pgp: []
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.9.1