Added monitoring with Prometheus Kube stack and instructions for setting it up with Helm; WIP - need to create targeted SOPS encrypt/decrypt scripts to prevent all files showing as modified in Git history when I decrypt/encrypt the entire directory

k3s/rpi/sops/.sops.yaml

@@ -1,6 +1,6 @@
 creation_rules:
-    - pgp: ENC[AES256_GCM,data:ejls+dnKmCop1YLWk1qFxcUzwG8eHImSSVsTOcK1KKKR5EVoydDzTQ==,iv:FJnBVcXt3cP0acJJQqs+ImK8J3LzAv0H12WrJljHM08=,tag:wLl45QFp61DF6jPBAwfnLQ==,type:str]
-      unencrypted_regex: ENC[AES256_GCM,data:cQovnj0JTaCilXsJznfoJUPmqZ+T42auAQuNiHyj5oLg,iv:cH4CfwAaeFJTGio6oskFXpZCYCeiHlHM8hZyJWPbYc4=,tag:NezZCQNOrM7BbW3Wy1qSYw==,type:str]
+    - pgp: ENC[AES256_GCM,data:30SdjmILUk1Xb3TxtxgwViGFlcwdNFbW/bWtQ2Gl1LfV09UD30hoAw==,iv:OaVWH2hBSzNZevy6XsFtmMVhyfcjC2Rh4VM+MZbSkJk=,tag:rFo3UU3XqeKvhBH2+snKFg==,type:str]
+      unencrypted_regex: ENC[AES256_GCM,data:SgP/zBbGz0abnYJkAk5vDBjR35tQxjvFgFEG7cnPkrHB,iv:mEL0aaWEDiIjwjdZi3sleXukcTpVQCGszoxXQO+FGFU=,tag:9KTpdqjpKiS64zoz7S/ZSg==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -10,14 +10,14 @@ sops:
         - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwT1dlT3I2akVLT01mRXRP
-            akNEZlE1anpDYWNZSUpNTERlUERLbHZjRWxRCmJtR2Yza3JTVnR3bjM1dzl3bGQw
-            SktJclhiUTFRWG5rZFZlVGV0QkxzWE0KLS0tIC9KSExLMlN2RmRIUStpR1QzcXd2
-            MDJ6QmovMTB1OVE1Ylh1Z1hEYmRVOVEK0wWgkdDVggURiSNbRMuG6ns4OEWxYmz/
-            GWgqAar78x8A8KEx70POyfssoMcmpjbmcExxIesv69OrGAsGlFFD4w==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvSHdJSXVqQk10ZDdsKzBr
+            KzhmWFJ2YXk1MzFvblJsL1ZYODhJa0p0S1FJCmtEdC80KzZsT2tmekM1V2lHZmFI
+            KzBUUGkyZTNaQ2RqVFJUNVJHcUlqNWMKLS0tIHI2YWdKdXlWRG1HTzFXTVR0Y0Jl
+            Zi9iUEQyTUd1ZnlzTng3WFl1aGsrM1kKWqJHQNlaKaCnJkHfftO0qmiBjjceuLXq
+            XUzJQb3g3ynagMe5BkQf8pu49wV42IX5Upshn89v9f3GjlkX5eQp2A==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-06-21T20:33:40Z"
-    mac: ENC[AES256_GCM,data:nLz+SQLf05uWYCWWDLazxS2Gt5I7fLbQcVHDo8yN+n991+E54/y8eAXqWwu3nR7dVo2AJt9/wxi4dDB13WUgcP01uG7nQzoC5CnpPJxMh3Qf24Il2EE62uXLxzC/PirzVk9fqXANV0s2x1Ii6GW+OyhCQHbCaiRw3OKQS24j9CU=,iv:scEB+WdVZTmAeEZ+Qh/U7JZsd1YDBUZMHW7MepIQEVg=,tag:d3gtI1brdt/gbtrDrRQwQg==,type:str]
+    lastmodified: "2025-06-29T21:30:30Z"
+    mac: ENC[AES256_GCM,data:OOX5khRaIhe0GxnmLn/ts/AvXFAxAx4RDWuYR3n6gW/PIAysMs3mhrlHZz//RmYbSTmpz+zAEynXGGmFDk/kHnicOGrjlhEgCzOf8nirzbUgQdutSYh7KILh1Zqe60/mDOu91GTw1Y1+ObpWzuvSP6YYDwYR2w1Z7MYCbvINOrg=,iv:BvDnSgD+lWyFBQ2xgC8N7wQMDxAXS6Uzc2ZLFjePhk0=,tag:7+1ps7pjzKk8kmBT4Hb4gA==,type:str]
     pgp: []
     unencrypted_regex: ^(apiVersion|metadata|kind|type)$
     version: 3.9.1