Added monitoring with Prometheus Kube stack and instructions for setting it up with Helm; WIP - need to create targeted SOPS encrypt/decrypt scripts to prevent all files showing as modified in Git history when I decrypt/encrypt the entire directory

This commit is contained in:
Vlad
2025-06-29 22:34:46 +01:00
parent 71bd447b78
commit c130157f2f
72 changed files with 18264 additions and 13543 deletions
@@ -1,19 +1,19 @@
#ENC[AES256_GCM,data:bzQ5nAzN5Zv8qpmJjgeDMYq0q68gCeKV1wYa4xrWfPY=,iv:vleevZk8L6LIcj2ar7KlbyWA3TAr9G344O32hNBmfKQ=,tag:oWhW3QSj/jHgCqzJ8mfrZg==,type:comment]
#ENC[AES256_GCM,data:zy2wZb/K6hXJIinwDZbI+TfS0MZIAv+yow0U/1uizyQ=,iv:7caQSV7mqSDO7skMbr4/VWb5XV9q+SYa13ubZfjgByk=,tag:rCQZdxi7gwuYHnG1c3NiDQ==,type:comment]
apiVersion: v1
kind: PersistentVolume
metadata:
name: transmission-config
spec:
storageClassName: ENC[AES256_GCM,data:0CB+s7J7,iv:8vSrDlMS5T3RwG5hWGGcNvUtVXsllb6nt3OM1wUJmYk=,tag:/ed28Ze5U3J2TCDRH5YbuQ==,type:str]
storageClassName: ENC[AES256_GCM,data:jYf7KHZQ,iv:gehMLpbIh7G4Q6gHV8Qh67taWzNbH2EnwDZChi0t5FQ=,tag:XxSYxSh3UKDpQm0S58WxSg==,type:str]
capacity:
storage: ENC[AES256_GCM,data:DcNgdcw=,iv:OU/i5btJB8JNDhfu0DH0ZuvV+nUgH2AaDJfWixQvxF4=,tag:nJErOITmBQbFZj5/KK7y0g==,type:str]
storage: ENC[AES256_GCM,data:1tdIo2c=,iv:qVD/lrWdLpaPv/CFnNn/xPMOEULrvuxHqV5rX8R/NuQ=,tag:/dUIcUUtxFt/JF+dj4p7jA==,type:str]
accessModes:
- ENC[AES256_GCM,data:g9GELtb6j7FbZF6Hog==,iv:/r/MXs1U7M9ZX3RH/qsEBVjyI3MK1rZhvpe2Rt+G/Us=,tag:mt+NVw2AYgKBUzScSHrn+w==,type:str]
- ENC[AES256_GCM,data:4KfNKRO/XObGzuHl6w==,iv:B+HCq2I6WXYDAVo8KHzJGbrXjXFhmsTw9pEqlWFlBag=,tag:+WJ2zZ5nrTNlxXFx8BdMMw==,type:str]
nfs:
server: ENC[AES256_GCM,data:yOXq2/mcNTJ2pxsN,iv:NJ7m83oJfybA+5sOaX2lfg9IQ8i9n+gDoodScvsOPyk=,tag:Sozb64TmgR8a68EWXeD5Xg==,type:str]
path: ENC[AES256_GCM,data:kFoKwwdM+mJlKzs+8qlBPTBAORvZvXOnaoJ8AmzGXbLxoUSekRSdQ9Wq,iv:jWf/efXSMWgjgpDJW+sBDy3PInMEkTo87EKAjEynbWo=,tag:Ddf9iavHbaIe7IYXBcjrjA==,type:str]
server: ENC[AES256_GCM,data:VvkEp7tlilpDM2Hz,iv:1pZoCWBT/+46r5CiaC/Si+QyFYhwUPH4feK9L/LoV6I=,tag:Ao4chIQiAuNSAJiDFBb0LQ==,type:str]
path: ENC[AES256_GCM,data:LjxakOMOCqt+vpJYZGGUDFno/4lTsMgaRMId1gXHLJQGPDET3gVGKDZF,iv:ZUQ9/teNDHjFVW+DLCyNgXqH5sBRGrZhGGZIRmaASaA=,tag:kEMUS92SCaM8WHGop0jc9A==,type:str]
mountOptions:
- ENC[AES256_GCM,data:O4EfeptA3U+gbN8=,iv:HICSVUdQSs6oKjR3KcXxT6djPkxBC/D6LWttrAOqX3s=,tag:wyrdo4jEUR/hbP0mbN4uVg==,type:str]
- ENC[AES256_GCM,data:jYCu5DtyPxWTHJ4=,iv:uSANcCip3DECbDStOKbYDPh7HiEc258m0jelu/u00gY=,tag:U3lR5tKUpc2n3rnl9HOhyA==,type:str]
sops:
kms: []
gcp_kms: []
@@ -23,14 +23,14 @@ sops:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrYTRJd241bEdybVl1WjM0
RUFHNXdYYjdwSFF5UkxZb0NTS25WTlhzcmpJCnE2amQ4b2w5VDJ4VXdWai92N0Yz
ckR3ZE5UTmJvRlU5dzEwSFI1QldzL1UKLS0tIHl5YWJTWVRDbTRWSndPVjFHakho
eHRWcEIrYllLcG43RUtBeU5kS005bjgKKttywunb+MLpUXfcRbtXD2YhS6pweJMa
MuXHAo/omW56ESyUVC07T/2pehbwXuc3wEELNHS4WzJcB80ZUgE9KQ==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKWWx5eXRZVUdxQ2VTNFNq
cVdXQ05UYkFVaEwwNXJjNDEvUWdnVWxYb2owCk10K1BMb3kzTktxVlNDaENWb3FE
cDFVYW9OZlhSRklRMXFvU0p4YXF1dkkKLS0tIG5taTY1bmsxVGtSbzhnZmJKNCti
R3N1dnVuV1NWbE5NRXNJUTVWZGhIM3MKbH1fInA0abgFDWZbJwTm2ASwKIoqAwKB
BM3p/B0XZ1ha6uG/NV2KCGH0v5RvFyuF64CDGiLUo/z1zXEMKi9cjQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-06-21T20:34:11Z"
mac: ENC[AES256_GCM,data:rN/NkjSUNIVRdN+PAGS//a2hqSbE9DZgosJS9BHuzKnRn7JxB9EiP7659d2INjCHPyBMfITcTs4FFvPKehsHFQF5jwVJR1/gPjSIeCiVFxORen4oA0WD1MxD2z8VIlKk0vUgvifmithx1v3oLjUNI7LgJb+gIpze5ypr6m3ATRo=,iv:o+fDCAIjUjhDnzkAd71FPk3HuFhh8xanB5JMXJJrP5U=,tag:k4awJHRHrtvGMYfiBLkIWQ==,type:str]
lastmodified: "2025-06-29T21:31:00Z"
mac: ENC[AES256_GCM,data:5XSJ60wuwP6PftWIOmHfN+M6Gc8yuKE46hsZjNSthRWh1+4qvLZQHoPuZw+hmVen83//g7k9yDS3Hd4NyVgu5AeX3HihdngZmQCssGgu6gphfEb/Sv/H50fV9QokIKPr46r42YB5IhEQqnAziru2PvYWeOPjTl0xpQY45IONT8Q=,iv:NVGp+hT9ZImjKJGdBxc0eHW0K0bRhP5g02QIdEUYnw8=,tag:uFyxnlFhXdTP0nRZg7cNgQ==,type:str]
pgp: []
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
version: 3.9.1
@@ -40,16 +40,16 @@ kind: PersistentVolume
metadata:
name: transmission-watch
spec:
storageClassName: ENC[AES256_GCM,data:70mpLDqb,iv:dVcs3L8CRpbGawNctFTFA8UJTzQTZjPzDfF34O8I7PQ=,tag:9YoC/hrI/yiluYw3099dyQ==,type:str]
storageClassName: ENC[AES256_GCM,data:MoOkiqIf,iv:vFMyDMrLoqpVruirxROZXgzI0NnVQ/8/wE8EVahex4M=,tag:5zceUwmzHmQOvGUyD0JAWQ==,type:str]
capacity:
storage: ENC[AES256_GCM,data:Qs/VZ8Y=,iv:BZMrpven0aNzq7BPlsFU1fds9+RBJoCvgNmdq25guQM=,tag:RiwnpLQoWEyh5kH6kVhWVQ==,type:str]
storage: ENC[AES256_GCM,data:R+eJ+rM=,iv:rVKYPdsZkZgboUH348Wmt09DwmPz7sAkTKDivycLCZA=,tag:CEzl/Ae4ZJ46HIc6XBZQfQ==,type:str]
accessModes:
- ENC[AES256_GCM,data:747NRcZGO0LCL2cGWg==,iv:RTmvl5GahjgJ1hQhGGTCmBy8dZcIH/W/k+yT9PHLwHs=,tag:iBBrvtB9ybe789+4BeDaWg==,type:str]
- ENC[AES256_GCM,data:1yjz2zkfqXPs0mRrhw==,iv:ppjL1OXVGlVIbnycXaJ3PRN6mLf6lPbWORpI3rPdytw=,tag:n3oEk+HGQTxidVNWZ6l+8A==,type:str]
nfs:
server: ENC[AES256_GCM,data:W1m7QfY9nKawvgyp,iv:1emFQ/wI0lh6L4OFwIGBuh+X3LAtzbbvhjd1LukewdQ=,tag:tbLeQr3GmDhzfwEnpWnzwg==,type:str]
path: ENC[AES256_GCM,data:5xZqwb4DTvyeAnGQ3eJvZKnJ5KIc/2gqqcn2drsdNn1XWFg217i9jbbo,iv:37IyqM8bDPZ1aX9shdDCi5D1JwDwQ8VAoovZKyeTU2g=,tag:72JM450ARnqc9a35LMjJcg==,type:str]
server: ENC[AES256_GCM,data:GjSXxbL+OnpZzdCh,iv:tagaGhtqCN/jPkoOyxO1pDudIiTgRtwLl9gmMezRyhg=,tag:XWlC4r84wdiQyh5UkHY9lg==,type:str]
path: ENC[AES256_GCM,data:dCIx54iJLobVGZgVMpDOhcSmOu9P1vIWeyE6ekM6eD1z3k5BAHULvWzG,iv:PdBwkjbLOtabY6WEaphIHvpAkl/OxXrk42vaun2wBSE=,tag:SArF/S72C1x5XPK2OFxT6A==,type:str]
mountOptions:
- ENC[AES256_GCM,data:G2FzfNObC7Y4LX8=,iv:nvcmFTWey0U2kQDbvakMAiz3YzREVUrCJPOBdqiONvo=,tag:KshkyZaN7BEZR7YrFBZ+SQ==,type:str]
- ENC[AES256_GCM,data:mluTKVaQlTJS824=,iv:z5saRN0ydCfvnDG/2eb4QNBPhE50jyJmVixliUksH24=,tag:OthnQzrfDLTH6cmDfK8Wrw==,type:str]
sops:
kms: []
gcp_kms: []
@@ -59,14 +59,14 @@ sops:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrYTRJd241bEdybVl1WjM0
RUFHNXdYYjdwSFF5UkxZb0NTS25WTlhzcmpJCnE2amQ4b2w5VDJ4VXdWai92N0Yz
ckR3ZE5UTmJvRlU5dzEwSFI1QldzL1UKLS0tIHl5YWJTWVRDbTRWSndPVjFHakho
eHRWcEIrYllLcG43RUtBeU5kS005bjgKKttywunb+MLpUXfcRbtXD2YhS6pweJMa
MuXHAo/omW56ESyUVC07T/2pehbwXuc3wEELNHS4WzJcB80ZUgE9KQ==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKWWx5eXRZVUdxQ2VTNFNq
cVdXQ05UYkFVaEwwNXJjNDEvUWdnVWxYb2owCk10K1BMb3kzTktxVlNDaENWb3FE
cDFVYW9OZlhSRklRMXFvU0p4YXF1dkkKLS0tIG5taTY1bmsxVGtSbzhnZmJKNCti
R3N1dnVuV1NWbE5NRXNJUTVWZGhIM3MKbH1fInA0abgFDWZbJwTm2ASwKIoqAwKB
BM3p/B0XZ1ha6uG/NV2KCGH0v5RvFyuF64CDGiLUo/z1zXEMKi9cjQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-06-21T20:34:11Z"
mac: ENC[AES256_GCM,data:rN/NkjSUNIVRdN+PAGS//a2hqSbE9DZgosJS9BHuzKnRn7JxB9EiP7659d2INjCHPyBMfITcTs4FFvPKehsHFQF5jwVJR1/gPjSIeCiVFxORen4oA0WD1MxD2z8VIlKk0vUgvifmithx1v3oLjUNI7LgJb+gIpze5ypr6m3ATRo=,iv:o+fDCAIjUjhDnzkAd71FPk3HuFhh8xanB5JMXJJrP5U=,tag:k4awJHRHrtvGMYfiBLkIWQ==,type:str]
lastmodified: "2025-06-29T21:31:00Z"
mac: ENC[AES256_GCM,data:5XSJ60wuwP6PftWIOmHfN+M6Gc8yuKE46hsZjNSthRWh1+4qvLZQHoPuZw+hmVen83//g7k9yDS3Hd4NyVgu5AeX3HihdngZmQCssGgu6gphfEb/Sv/H50fV9QokIKPr46r42YB5IhEQqnAziru2PvYWeOPjTl0xpQY45IONT8Q=,iv:NVGp+hT9ZImjKJGdBxc0eHW0K0bRhP5g02QIdEUYnw8=,tag:uFyxnlFhXdTP0nRZg7cNgQ==,type:str]
pgp: []
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
version: 3.9.1
@@ -4,12 +4,12 @@ metadata:
namespace: transmission
name: transmission-config-pvc
spec:
storageClassName: ENC[AES256_GCM,data:bH8aBKA33zTIgg==,iv:cSRE9mPf42sWbpGN9wOt76/jUs6EwGrTadKu+Tm10zo=,tag:H5O4o3gdZHOYHmX4zUFaWw==,type:str]
storageClassName: ENC[AES256_GCM,data:I/pqwEudC9czjw==,iv:rHRUezsMP6A6i8FWz7Slk1dydXXhbEza+IE1IcKUd+0=,tag:w2ahEbPKgTzgNB9eUCN1sA==,type:str]
accessModes:
- ENC[AES256_GCM,data:agMWo3Z/CrIDB6wn+w==,iv:8nMqrqMnzshOnNiI4zetiZ/IuWCRCnnncOqllpzGc4k=,tag:iOA1V6QlnkiT0/aXG6ExsA==,type:str]
- ENC[AES256_GCM,data:79eVbjvaeiMrICtGXg==,iv:xdSGrjrlOk1NY+dAd1LhVoVON3ZSId+WGzZK5nbCBkg=,tag:pVlu9ypU1sfAugouOPI9fw==,type:str]
resources:
requests:
storage: ENC[AES256_GCM,data:QiCpiw==,iv:JupJX4AAhdyxJpXV0IhHIS8KOSh08lK2CG8kPUPdlnk=,tag:eW+M/7zCE8LvWF6otjWbvQ==,type:str]
storage: ENC[AES256_GCM,data:Kk3OPg==,iv:jLgH1byy8cB5FyAYaRYlB3Epv4TbZ7QZP+gwfhxYccg=,tag:QSWSMQhgA/ft8gnD1/7gXg==,type:str]
sops:
kms: []
gcp_kms: []
@@ -19,14 +19,14 @@ sops:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1VXI1V1p5VmdtTDE3MGlj
VElXT05ucjJYZ2JUZnhGN1JzaCtBRTZWSkg0CjYyMVRwMXFNVkJaTDFDRjgzWUJ6
WS81eEpnOXhINUJzek05U056NjdmWWMKLS0tIFlJTys2Yk1kZ1IraUFZSnZYeS83
K24rajIxelpENm5uMGdJWDdzNUFwODAKC/qZBZ/fuPxhAsQB/zfbOyKn8Whaw+DY
ue9EaI9M2QK6r5kC6Wu5C/fILskOZkmgJQHJKtShLfF7n1gmvcYDrw==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1Tm5JRGc0SWk2eDZ4NmZI
Y0RORWFQSVhlSWNIUjA1QllNaE9mOHJ6Q1ZZCnpybWVnNmJNdzByNlNLaW5LR1p3
dHhlRExsRUxnWVZ2eE90NkVwSm0wMHMKLS0tIDZudERLM1J1ZlNqZmgwaCt5SHNw
VFpxZFNERWdsbDVOd0dCT2N4TmRkUVkKL3x9YeeMuF3kTQGET2rmNp6FNR62qbPf
S1qdnE2B2M0Vu/JuSoBQM1EI5wxJodSrtcG3mNEX23SSXOcJngBktg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-06-21T20:34:11Z"
mac: ENC[AES256_GCM,data:ULJOm0HM/H0AkLEWMHyvO0Jzj7JYvfiiFK5QUzoyZsrPWyQHkabo3rRVJ+Ks/ljEgxUcxLQFUnHKSBqanCV8iQ/+QkCZXgsRI8Cu6sY8SJKB87PoxQZ2RSeXxzMHl3IxIImDrni8dB08Iuc+YSEMlapoKWWlmCurtfKeJPE9/cw=,iv:8NR9K9+40uLSOXaiJdSxI8kDWWfl6vGl/TkjqzCTWpA=,tag:gKagJjzkrrMeofDgt9DSAQ==,type:str]
lastmodified: "2025-06-29T21:31:01Z"
mac: ENC[AES256_GCM,data:wZPoEo/xK0tsZnzXrGKjFNF1cfW1/Kh10r0CptWK70TO+pp6ccwEJRAe5Vy8Wf8nF+PYRp0lC5R7XZkzdf4oZKyIbDGBgqSrD9xJr71a0B8c8TyohjQUccef2ZnzTzSjnsNa4p/OwyDWFwn59O1FuUuJRj2S2ICUgxfhZMDzLns=,iv:Vyz8VJ6mZ9FFxfl/t/IX5fclSqIhDrrDuS/f06Fo9So=,tag:/F9q7yaxbHkrsecGZ4XFeA==,type:str]
pgp: []
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
version: 3.9.1
@@ -37,12 +37,12 @@ metadata:
namespace: transmission
name: transmission-watch-pvc
spec:
storageClassName: ENC[AES256_GCM,data:Kur//F0qJsRJQA==,iv:4VFBcaLw5jgJXzI3OMfa+Sjf99ABlZ6gCZ/bjRS03PY=,tag:bPCgWddC8is+AIkxiSVgvA==,type:str]
storageClassName: ENC[AES256_GCM,data:yY/fP2NVPsJeuQ==,iv:xzbvnHlzN06EwclqizAKvhfuy8ehYdTyf62dkjZBfBw=,tag:Uy+jAfQchzTg2OlBOQYypQ==,type:str]
accessModes:
- ENC[AES256_GCM,data:ciEVis14sMVTGSNjdw==,iv:ETLKUrha/tQph0QilhpWbpA7r574zKc2Sz/CW83ni1U=,tag:LiZkRd0w55KK4/roMia97Q==,type:str]
- ENC[AES256_GCM,data:EYyfMK6eo5KQh/UQBg==,iv:DbRVveY7KUftD2qSsatSHioyd24djZIg5FC3jHd46Lc=,tag:uPYxJZYyckjK5bnHQroGww==,type:str]
resources:
requests:
storage: ENC[AES256_GCM,data:ja1xLA==,iv:5NMOP2CWCVuhtLN/Ayxh9QX25/FHSBIssdVbMEqTosY=,tag:YJZWJPu6Gv2+i+rGcGCSSQ==,type:str]
storage: ENC[AES256_GCM,data:gtm2Wg==,iv:CUbs3+5RpvCdzJAWRQ1FCTcn/npPjH97hqJr/3eeFAU=,tag:WdkAxhj9ghTkyiglcdFqiA==,type:str]
sops:
kms: []
gcp_kms: []
@@ -52,14 +52,14 @@ sops:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB1VXI1V1p5VmdtTDE3MGlj
VElXT05ucjJYZ2JUZnhGN1JzaCtBRTZWSkg0CjYyMVRwMXFNVkJaTDFDRjgzWUJ6
WS81eEpnOXhINUJzek05U056NjdmWWMKLS0tIFlJTys2Yk1kZ1IraUFZSnZYeS83
K24rajIxelpENm5uMGdJWDdzNUFwODAKC/qZBZ/fuPxhAsQB/zfbOyKn8Whaw+DY
ue9EaI9M2QK6r5kC6Wu5C/fILskOZkmgJQHJKtShLfF7n1gmvcYDrw==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1Tm5JRGc0SWk2eDZ4NmZI
Y0RORWFQSVhlSWNIUjA1QllNaE9mOHJ6Q1ZZCnpybWVnNmJNdzByNlNLaW5LR1p3
dHhlRExsRUxnWVZ2eE90NkVwSm0wMHMKLS0tIDZudERLM1J1ZlNqZmgwaCt5SHNw
VFpxZFNERWdsbDVOd0dCT2N4TmRkUVkKL3x9YeeMuF3kTQGET2rmNp6FNR62qbPf
S1qdnE2B2M0Vu/JuSoBQM1EI5wxJodSrtcG3mNEX23SSXOcJngBktg==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-06-21T20:34:11Z"
mac: ENC[AES256_GCM,data:ULJOm0HM/H0AkLEWMHyvO0Jzj7JYvfiiFK5QUzoyZsrPWyQHkabo3rRVJ+Ks/ljEgxUcxLQFUnHKSBqanCV8iQ/+QkCZXgsRI8Cu6sY8SJKB87PoxQZ2RSeXxzMHl3IxIImDrni8dB08Iuc+YSEMlapoKWWlmCurtfKeJPE9/cw=,iv:8NR9K9+40uLSOXaiJdSxI8kDWWfl6vGl/TkjqzCTWpA=,tag:gKagJjzkrrMeofDgt9DSAQ==,type:str]
lastmodified: "2025-06-29T21:31:01Z"
mac: ENC[AES256_GCM,data:wZPoEo/xK0tsZnzXrGKjFNF1cfW1/Kh10r0CptWK70TO+pp6ccwEJRAe5Vy8Wf8nF+PYRp0lC5R7XZkzdf4oZKyIbDGBgqSrD9xJr71a0B8c8TyohjQUccef2ZnzTzSjnsNa4p/OwyDWFwn59O1FuUuJRj2S2ICUgxfhZMDzLns=,iv:Vyz8VJ6mZ9FFxfl/t/IX5fclSqIhDrrDuS/f06Fo9So=,tag:/F9q7yaxbHkrsecGZ4XFeA==,type:str]
pgp: []
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
version: 3.9.1