vlad/k8s-lab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added monitoring with Prometheus Kube stack and instructions for setting it up with Helm; WIP - need to create targeted SOPS encrypt/decrypt scripts to prevent all files showing as modified in Git history when I decrypt/encrypt the entire directory

Browse Source
This commit is contained in:
Vlad
2025-06-29 22:34:46 +01:00
parent 71bd447b78
commit c130157f2f
72 changed files with 18264 additions and 13543 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k3s/rpi/kube-system/metallb/ip_pool_l2_adv_config.yaml
+16 -16
View File
@@ -5,7 +5,7 @@ metadata:
namespace: metallb-system
spec:
addresses:
- ENC[AES256_GCM,data:nxZ6Q4oTJweWareSNTASaq5CDXq9oqj0giOV,iv:YCTfjMWcdFIZzuHxV2JAZii8XZsnaP6FQj34pR9U0a0=,tag:0aWTKWI1ckNWd88MqyvwuA==,type:str]
- ENC[AES256_GCM,data:DuK6lSoWExcky4Rfn09rQFoM4M+9TM4zT/av,iv:3vM5MCXPIpQN2+HBP/VyfBjnXNZfrmpBfVUIzfDes8A=,tag:IYNHZCT9Ugi69jnIcOpKhQ==,type:str]
sops:
kms: []
gcp_kms: []
@@ -15,14 +15,14 @@ sops:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQa0lNZWxnOTZxRUdVWFZG
b1B5WTZXT3RLZ2Z1RGNERm9qMmhKYWd3SXpjCjVnOHhUVkxwOUZpUDRsQ3Jrd2Q5
SnVITlhQcTBSWWtCbnoxbnF4YitVTUEKLS0tIHNCcW5telcyZHdOM0JnZmcyRXhD
cHhyMmhVRkVCU0pVWVFodHdOOEdWR0kKkgWbxB4Vy/1wckCba1UHH8yliiRIzoL/
cPeQ2bxXf6Hn1EP9rSDGp9B+NJ2fX62L5VLx0QBcmLOJNdYW14xdnw==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlMDZTdnN6Q2E1aWxnRXZ1
ZTJnSGN1ZzdQbHVodXNWZWdKdDdUa1RQSUhvCk1VV3FBMkFMeHBNcXNqd09OcjJ1
YndrejFhUU5wM1A1b1JVc2htaXVqOW8KLS0tIDZoVVl2MTk2SU10WkV4YkxzUGtH
M29yUm5oTDdhY1NXbEFaU3VhVGFaNGMKt7a9tF1exkcysiYoust3VsH/VPWm6rW/
ztE87noztJp4aMiFfp66D5+XlPOSlsCEeYpG82zb10x5rHtkcw0Y9g==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-06-21T20:34:14Z"
mac: ENC[AES256_GCM,data:7S3vj4gzvtfC6rE3+v+qxKRQbjbHSre9ORLxvMccCJHg78g0fpghxHMT+RDL0ekav/NwSqj7APzoFYddUdB/ahCIXCPOuKsfVVeWX58SMPUHKVU/E9tc7skeYLPxN8ZRl3ZagUg6ppB6S76Lj5BtKKAWtwPKYM3PJLhc90Ol92s=,iv:+Zc1aqMvGV+4PMcNvO+gjbEdnq/DQtRNJD/surXRZWU=,tag:b7apwrhXwbtlqVYJb7Z9IQ==,type:str]
lastmodified: "2025-06-29T21:31:03Z"
mac: ENC[AES256_GCM,data:SbEjCJp0kqrvuH1dEt+yRz+uhqa6h3jkKgyi6tebsG41dP4eO2aWG2VCyy/CmFgNavvIeb52ACnnWoqACJ07Tw9IOZH5VTWH2uUYlx5ZQ5uPpoLvJ92zvpbOwOEtQ1wj1CQdIXOO2mxg4gbw+COk44ki1+0bZxmQMBd/tMy5t2w=,iv:4zyLaWEe7eZNPg/BkxHIvKCABR/Lg4blcoB/UsOaAhQ=,tag:bVE/tJx/Ayc2FJCQRx5crA==,type:str]
pgp: []
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
version: 3.9.1
@@ -34,7 +34,7 @@ metadata:
namespace: metallb-system
spec:
ipAddressPools:
- ENC[AES256_GCM,data:wJ4zvKICIWg=,iv:CObRvRRvaVI5WbxU/XEkzyWmxO3/p7N08TGWUHGFbG8=,tag:evIupeFB6R4bw2saNN9BNg==,type:str]
- ENC[AES256_GCM,data:/b1hTcfKcrw=,iv:q90n25lxM0N8O2cTlibnlMT7p+3IqldcLBsQI5dKC5U=,tag:xRPSECD+cMSHxEoQDVYjyg==,type:str]
sops:
kms: []
gcp_kms: []
@@ -44,14 +44,14 @@ sops:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQa0lNZWxnOTZxRUdVWFZG
b1B5WTZXT3RLZ2Z1RGNERm9qMmhKYWd3SXpjCjVnOHhUVkxwOUZpUDRsQ3Jrd2Q5
SnVITlhQcTBSWWtCbnoxbnF4YitVTUEKLS0tIHNCcW5telcyZHdOM0JnZmcyRXhD
cHhyMmhVRkVCU0pVWVFodHdOOEdWR0kKkgWbxB4Vy/1wckCba1UHH8yliiRIzoL/
cPeQ2bxXf6Hn1EP9rSDGp9B+NJ2fX62L5VLx0QBcmLOJNdYW14xdnw==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlMDZTdnN6Q2E1aWxnRXZ1
ZTJnSGN1ZzdQbHVodXNWZWdKdDdUa1RQSUhvCk1VV3FBMkFMeHBNcXNqd09OcjJ1
YndrejFhUU5wM1A1b1JVc2htaXVqOW8KLS0tIDZoVVl2MTk2SU10WkV4YkxzUGtH
M29yUm5oTDdhY1NXbEFaU3VhVGFaNGMKt7a9tF1exkcysiYoust3VsH/VPWm6rW/
ztE87noztJp4aMiFfp66D5+XlPOSlsCEeYpG82zb10x5rHtkcw0Y9g==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-06-21T20:34:14Z"
mac: ENC[AES256_GCM,data:7S3vj4gzvtfC6rE3+v+qxKRQbjbHSre9ORLxvMccCJHg78g0fpghxHMT+RDL0ekav/NwSqj7APzoFYddUdB/ahCIXCPOuKsfVVeWX58SMPUHKVU/E9tc7skeYLPxN8ZRl3ZagUg6ppB6S76Lj5BtKKAWtwPKYM3PJLhc90Ol92s=,iv:+Zc1aqMvGV+4PMcNvO+gjbEdnq/DQtRNJD/surXRZWU=,tag:b7apwrhXwbtlqVYJb7Z9IQ==,type:str]
lastmodified: "2025-06-29T21:31:03Z"
mac: ENC[AES256_GCM,data:SbEjCJp0kqrvuH1dEt+yRz+uhqa6h3jkKgyi6tebsG41dP4eO2aWG2VCyy/CmFgNavvIeb52ACnnWoqACJ07Tw9IOZH5VTWH2uUYlx5ZQ5uPpoLvJ92zvpbOwOEtQ1wj1CQdIXOO2mxg4gbw+COk44ki1+0bZxmQMBd/tMy5t2w=,iv:4zyLaWEe7eZNPg/BkxHIvKCABR/Lg4blcoB/UsOaAhQ=,tag:bVE/tJx/Ayc2FJCQRx5crA==,type:str]
pgp: []
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
version: 3.9.1
k3s/rpi/kube-system/metallb/lb_test_app.yaml
+29 -29
View File
@@ -11,14 +11,14 @@ sops:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZamlOMk4rU09EV21PT0RR
anZBWEZjREl0a25QZ3oxaHVGaGRlMkZqZFFjCkNyYVNpckNtQlhHd2I1K3haaGJ3
Qi93SWFjMmZTdUtzbFZlVGFjUWEvVlUKLS0tIE9UeWsyMDBPWjhLTTJtUWdnbHFT
aExlNFoyeHpYQnJka3pXbytRbEJFWGMKGlaku1Z5guvSnerEwozvC55zC902BLQ3
rQqISc2FDAY2xeWUXuhI2VgBuJzmynvjh8bYNFSM5kOaFekzX5+R2Q==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSU29iaFozRXN3VTllcUNj
eWpRdE1PQTZ2b054RTN6WG4zMFM4SndOTTJjCmF4TlM3QmZQWS95Wm9sMzdVOXc2
dFRJUnZvdHlFeGhSY0l6bDB2OTQ4bkkKLS0tIGs0Q1ZPdjN6Y2ZCSlE3U25oa1pa
dnFUaThYN0ZWVjk5SnhUTTlXanFtTVEKo9woKyAbj2qkaAX0KOrzyfTeIDYAvNuf
gjYXC6baJc98402fDqly/kdO+wBzJbqFGZhAUyQK5+KFMgH3Lh+m5A==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-06-21T20:34:14Z"
mac: ENC[AES256_GCM,data:vKfrrpOuy+pfNYbtXQ7UITV1C4UdLonPo7WTXB7Ukbzep5P+legpCWS5xSSh8ZOohse86ZRH/V01sJscAK80J5pxFwnPS4qcvOk46OfLmpZJGqq54hNNyITJGZ310cRQduarOddXpuookqk8v4+l7e9+/jJO5bTq2yuQzKQ5808=,iv:pRYiZoS05wm6pv01OUf2RPCzJrJmlltSiIIGc2av9i4=,tag:8A2aPe/gFSvmUwtleRhlPA==,type:str]
lastmodified: "2025-06-29T21:31:03Z"
mac: ENC[AES256_GCM,data:XR5oTEIwxCh/oh1hNcTr8MQlc0l3Cn5yMaDMIQ8LXgGwpRK6rvGU8qLiWE9zDvGirGkin6fWFRViaJ2q4Oeph0Iz9p5kgOOX1vP7QPZCuKaVpZ2c4dXfllGqjchaBXVnZqT7qzSxD12KUyM6s3AFVxktbAVNNsaTDHOpTiN75S4=,iv:A0gG+nroSeeQ8GmKbLA89qgeEmJapA/2I+19FXb03Mo=,tag:uiayJCNmJj6d5qg1w753RA==,type:str]
pgp: []
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
version: 3.9.1
@@ -31,17 +31,17 @@ metadata:
spec:
selector:
matchLabels:
app: ENC[AES256_GCM,data:Fg92,iv:wKQN13WRFesAwpf4cH3vpLDbMAsQ8gD3JJrYe+397ig=,tag:VG7kwVtwsqZ7dua5qTcAuQ==,type:str]
app: ENC[AES256_GCM,data:WKBX,iv:RBlT1g846hibyFmvKUrqIrIic+gwZv6DemPV/uZ6xWg=,tag:UFDpDfzV/xrenBpIrlTrAg==,type:str]
template:
metadata:
labels:
app: web
spec:
containers:
- name: ENC[AES256_GCM,data:7bM+kcA=,iv:XLtGp2fg1aOwIiFRDMlsTuJbeLK2DV8JZNhojjwyV6I=,tag:aamUf+aOXpn4cvMiH3wo1A==,type:str]
image: ENC[AES256_GCM,data:LKkMTA5PTX1tHoVk,iv:CjKkfXmKFub3r5Bf5XGtOCvbADoD9x/uAvRvsnhB3jc=,tag:4E31cMYQGUGQpI6T46I7fA==,type:str]
- name: ENC[AES256_GCM,data:D/RL/08=,iv:rMDh7cK8Zh3lhjabUsTn1boCJyvdxPJjxG1Kt4cKhB0=,tag:5k4dHP8KcPuyUrvQekAhmQ==,type:str]
image: ENC[AES256_GCM,data:fJsAm5JYnrT2i/3v,iv:c5XWA7ifJO/JbNaPJuRb0TLlXFX3LbtYgxW5GbWWgL0=,tag:6jlxkKaP1+vxmLT48z/xsA==,type:str]
ports:
- containerPort: ENC[AES256_GCM,data:EM4=,iv:Z3QX9Z8GCNr5XW5oo46wrUqparihHlJGMca+my5uhXs=,tag:KtUNgHih/kxyKDA0UjezFA==,type:int]
- containerPort: ENC[AES256_GCM,data:lr4=,iv:CJq9iz7o1s8BCd0SSFEfrsUSbVgK1Pg7QuhwWlInD8Q=,tag:BYPyEjbDs34rKvc2WJXhIA==,type:int]
sops:
kms: []
gcp_kms: []
@@ -51,14 +51,14 @@ sops:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZamlOMk4rU09EV21PT0RR
anZBWEZjREl0a25QZ3oxaHVGaGRlMkZqZFFjCkNyYVNpckNtQlhHd2I1K3haaGJ3
Qi93SWFjMmZTdUtzbFZlVGFjUWEvVlUKLS0tIE9UeWsyMDBPWjhLTTJtUWdnbHFT
aExlNFoyeHpYQnJka3pXbytRbEJFWGMKGlaku1Z5guvSnerEwozvC55zC902BLQ3
rQqISc2FDAY2xeWUXuhI2VgBuJzmynvjh8bYNFSM5kOaFekzX5+R2Q==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSU29iaFozRXN3VTllcUNj
eWpRdE1PQTZ2b054RTN6WG4zMFM4SndOTTJjCmF4TlM3QmZQWS95Wm9sMzdVOXc2
dFRJUnZvdHlFeGhSY0l6bDB2OTQ4bkkKLS0tIGs0Q1ZPdjN6Y2ZCSlE3U25oa1pa
dnFUaThYN0ZWVjk5SnhUTTlXanFtTVEKo9woKyAbj2qkaAX0KOrzyfTeIDYAvNuf
gjYXC6baJc98402fDqly/kdO+wBzJbqFGZhAUyQK5+KFMgH3Lh+m5A==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-06-21T20:34:14Z"
mac: ENC[AES256_GCM,data:vKfrrpOuy+pfNYbtXQ7UITV1C4UdLonPo7WTXB7Ukbzep5P+legpCWS5xSSh8ZOohse86ZRH/V01sJscAK80J5pxFwnPS4qcvOk46OfLmpZJGqq54hNNyITJGZ310cRQduarOddXpuookqk8v4+l7e9+/jJO5bTq2yuQzKQ5808=,iv:pRYiZoS05wm6pv01OUf2RPCzJrJmlltSiIIGc2av9i4=,tag:8A2aPe/gFSvmUwtleRhlPA==,type:str]
lastmodified: "2025-06-29T21:31:03Z"
mac: ENC[AES256_GCM,data:XR5oTEIwxCh/oh1hNcTr8MQlc0l3Cn5yMaDMIQ8LXgGwpRK6rvGU8qLiWE9zDvGirGkin6fWFRViaJ2q4Oeph0Iz9p5kgOOX1vP7QPZCuKaVpZ2c4dXfllGqjchaBXVnZqT7qzSxD12KUyM6s3AFVxktbAVNNsaTDHOpTiN75S4=,iv:A0gG+nroSeeQ8GmKbLA89qgeEmJapA/2I+19FXb03Mo=,tag:uiayJCNmJj6d5qg1w753RA==,type:str]
pgp: []
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
version: 3.9.1
@@ -70,11 +70,11 @@ metadata:
namespace: web
spec:
selector:
app: ENC[AES256_GCM,data:aaQy,iv:7tLAmrmkVvplNCdo2k18k8weeEGl8Z827YgBcPzN53s=,tag:UbnNkjtspmvkYSE3dglETw==,type:str]
app: ENC[AES256_GCM,data:5KVS,iv:/HCCKwecAbK6/UNEZSXE2Vl4i3MHSppnh9vu+Xq0QMM=,tag:9gmn1iekC82bbiJj/9IT7Q==,type:str]
ports:
- protocol: ENC[AES256_GCM,data:Nm3j,iv:jj5ojSUW8l/RVCb6Idu3udRTuOZuZ8nhP1SoIe79l/c=,tag:OPdE50txyouCxsRPSdd6IQ==,type:str]
port: ENC[AES256_GCM,data:uMY=,iv:BYLFm0rXKpyP80a+/fiTHcimicO33TjgX0N29wrJxvo=,tag:vNRb1oTNhdmP4PLSKI1LUQ==,type:int]
targetPort: ENC[AES256_GCM,data:Xew=,iv:O2SkA9bj39lDEbOK1TyN3SC5/ILDdY4niFHaIer7pt0=,tag:tdMMboQzwcl1cECJg1dKvQ==,type:int]
- protocol: ENC[AES256_GCM,data:SN1D,iv:ACkMo94BDiOaduMuvokcy3S0JmJ0NFMXYx9NQ8LgMFM=,tag:dbdAwvoReTCkJeYs1Ojq6w==,type:str]
port: ENC[AES256_GCM,data:vW4=,iv:KWno3gM/L91kAG3cKLmoIqYQ+0FG6O65lInqBHbVmM0=,tag:pekVWucrWBit5kgrn4ereQ==,type:int]
targetPort: ENC[AES256_GCM,data:cpM=,iv:ZCrwXyWN7M4Cifdd/G3qefNO7HI77B4ihHC72YI+gYQ=,tag:GadIbSu8Ap+3flKtbgDFMA==,type:int]
type: LoadBalancer
sops:
kms: []
@@ -85,14 +85,14 @@ sops:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZamlOMk4rU09EV21PT0RR
anZBWEZjREl0a25QZ3oxaHVGaGRlMkZqZFFjCkNyYVNpckNtQlhHd2I1K3haaGJ3
Qi93SWFjMmZTdUtzbFZlVGFjUWEvVlUKLS0tIE9UeWsyMDBPWjhLTTJtUWdnbHFT
aExlNFoyeHpYQnJka3pXbytRbEJFWGMKGlaku1Z5guvSnerEwozvC55zC902BLQ3
rQqISc2FDAY2xeWUXuhI2VgBuJzmynvjh8bYNFSM5kOaFekzX5+R2Q==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSU29iaFozRXN3VTllcUNj
eWpRdE1PQTZ2b054RTN6WG4zMFM4SndOTTJjCmF4TlM3QmZQWS95Wm9sMzdVOXc2
dFRJUnZvdHlFeGhSY0l6bDB2OTQ4bkkKLS0tIGs0Q1ZPdjN6Y2ZCSlE3U25oa1pa
dnFUaThYN0ZWVjk5SnhUTTlXanFtTVEKo9woKyAbj2qkaAX0KOrzyfTeIDYAvNuf
gjYXC6baJc98402fDqly/kdO+wBzJbqFGZhAUyQK5+KFMgH3Lh+m5A==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-06-21T20:34:14Z"
mac: ENC[AES256_GCM,data:vKfrrpOuy+pfNYbtXQ7UITV1C4UdLonPo7WTXB7Ukbzep5P+legpCWS5xSSh8ZOohse86ZRH/V01sJscAK80J5pxFwnPS4qcvOk46OfLmpZJGqq54hNNyITJGZ310cRQduarOddXpuookqk8v4+l7e9+/jJO5bTq2yuQzKQ5808=,iv:pRYiZoS05wm6pv01OUf2RPCzJrJmlltSiIIGc2av9i4=,tag:8A2aPe/gFSvmUwtleRhlPA==,type:str]
lastmodified: "2025-06-29T21:31:03Z"
mac: ENC[AES256_GCM,data:XR5oTEIwxCh/oh1hNcTr8MQlc0l3Cn5yMaDMIQ8LXgGwpRK6rvGU8qLiWE9zDvGirGkin6fWFRViaJ2q4Oeph0Iz9p5kgOOX1vP7QPZCuKaVpZ2c4dXfllGqjchaBXVnZqT7qzSxD12KUyM6s3AFVxktbAVNNsaTDHOpTiN75S4=,iv:A0gG+nroSeeQ8GmKbLA89qgeEmJapA/2I+19FXb03Mo=,tag:uiayJCNmJj6d5qg1w753RA==,type:str]
pgp: []
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
version: 3.9.1