apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
    name: gitea-prod-tls
    namespace: dev-stuff
spec:
    secretName: ENC[AES256_GCM,data:vlfpbuXeUnZp8r0qOSY=,iv:/1PYIT9H5QahkY7vVEAaLSm7ASLe/d0buV5XmAYTbg0=,tag:lSzPBSgyb4bDnSsUuHtpOw==,type:str]
    #ENC[AES256_GCM,data:FmDfjQ==,iv:8VnFnZrq249XY7GrpSQg7E81MqAwd6Ou/dHtoou+Atk=,tag:UuiZHq9lReyok7xvMHS/Lg==,type:comment]
    duration: ENC[AES256_GCM,data:4o3lxXo=,iv:1fyVWfUjQy+XnKHx2VBa57v36uKnGs46q1nu30NJxsE=,tag:Y6yr3VZgKQmeZcTTkrzIvA==,type:str]
    #ENC[AES256_GCM,data:RBziew==,iv:7rqhMKvhl4WrrBQVG2WZDTA9SH8vWWsHwHSYsaG075I=,tag:JDzvb3ESkjY1VXNSw6oyfA==,type:comment]
    renewBefore: ENC[AES256_GCM,data:GfyFWQ==,iv:k/jwT4K8jrnDKwmyLT7IW8HLV5h5c6Mm3GD8EiU0WaM=,tag:b+FyMRQwa37ByGxNqgBiTg==,type:str]
    subject:
        organizations:
            - ENC[AES256_GCM,data:VsJR,iv:ceyp37W2y1SLot7bk8VFxrao5pulskp8eDT1SZEyBpY=,tag:rsttNfPDADv7fInB8Sff6w==,type:str]
    commonName: ENC[AES256_GCM,data:oQgM4m3PY/z2ydBIv8ev31/Gn0Jm1Q==,iv:2pdMdAOvq3MxZRyXiNaq4YxAbSRWCs0zCfc1VhoOEsc=,tag:rMKPK+wl/bwKFsOfYoAZ6A==,type:str]
    isCA: ENC[AES256_GCM,data:XmBJnj4=,iv:04kZMpLeCI1Q3x4m2ZyXi8mC4l1E2nUWKrpU7aHKpE4=,tag:5v0+T0IF7JAUsscD6HSOSA==,type:bool]
    privateKey:
        algorithm: ENC[AES256_GCM,data:Fb5X,iv:5hSL8zWobZEcQuYEYezvbqB+6/i0SxRJ13X9RQy5r1Q=,tag:PDeK/I/5OUZD6dVzuX1N/Q==,type:str]
        encoding: ENC[AES256_GCM,data:BxTqwQs=,iv:j9K80pHwpZUpdHqbZcmYZYPDJaTDE04p0CBXW5l4iSA=,tag:HpafaJ9mMQ050eSPKzBGPg==,type:str]
        size: ENC[AES256_GCM,data:0k2Ijg==,iv:XXic+fKVFZ+hGFS2wn7rcD8UY4tVurpNo1LIG/EwsIg=,tag:iZkXRjDQTCFSwyV6GdYVHw==,type:int]
    usages:
        - ENC[AES256_GCM,data:9hQHCLEVJbqLSpg=,iv:t6oSCR5RqYr+TdDOC9Z/NFwZhAtaL9gm7yF19mfq/9o=,tag:nJip/NOnYbUm5mVRvPUbvQ==,type:str]
        - ENC[AES256_GCM,data:myI16wtRsIBJh98=,iv:0vTJrI0S+wtqhFq4ViuvoBOI8aXgHGeOE9APsYYKsWA=,tag:9YPdkGQr0D9/V2TaravrSg==,type:str]
    dnsNames:
        - ENC[AES256_GCM,data:BXgpQzJCaART3tl7eCiNZgCRVsg9kA==,iv:6s3iqW1r9PPRHriYtTTarg4UGczj27mzKlaAPeH9EoQ=,tag:I6j6yYObIMgk9vN0duqckQ==,type:str]
    issuerRef:
        name: ENC[AES256_GCM,data:kOn24NXNwDp/yTO+NsAwQg==,iv:K4+GiYGeNF2KCKgA61IUcmHPHckXuXdGIBQzoeA6QWY=,tag:ZzZ7vysXhFYLFBO9x5Pz/Q==,type:str]
        kind: ClusterIssuer
        group: ENC[AES256_GCM,data:5ZZHlzJ+HBZYas9Aul2R,iv:gFe/kWjHCB7eJYlXLKzXOhL7zIaa5k77T2plXOy/IDo=,tag:OQ8AIth6a+XAcESGBo7gbQ==,type:str]
sops:
    age:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3bUsyMklRU1Y4V0hWWmJ5
            R1U0aEZWSkx1NmpWMmhHbG8ydWFSajBCSUNnCkFQZVoyeDBBdTJDc2wyc003UGhs
            T2d3Um80SDN4aTNPQkZwaXBOb2hzMFUKLS0tIFB6UzNyZ2UrOHdPV0U0bFc5WVNk
            aHRQNWdrOXQ1bHRWdHJRRlE5TWRBNncKdyWCe1pSEgEXcmOB+6tOITSIDnpswnCv
            uIUvD1FwCZ3OSZkWuG68Yln0x8345yc6z2U8HiPfc4OOYzg6lsU+9A==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-11-15T23:47:15Z"
    mac: ENC[AES256_GCM,data:2Cq/ubdl/+/JjUCeR2V24hJnVlok+Ngcgi7U5HyJPMftf9ZPS4evgIquvLfJR21FX6gH1fou6/HxdCUXqOBiDrPWLhoVSbOK+dUYYYVzcBhuxbW/fAOqvXuYmRCzoSzeafk3ihGIrqSznQmOlnCFJsGivtTO7KLLA+52My03ywQ=,iv:B8PIa4ktPvqCX4VDpoPPadC5q39ela7kUiQmajEl2zE=,tag:Ckem4WFkwnXKLqy+uwr4Ig==,type:str]
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.11.0
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
    name: gitea-pvc
    namespace: dev-stuff
spec:
    storageClassName: ENC[AES256_GCM,data:8pRS1GnPMdzkPQ==,iv:8PXHsrfjs4VbHc+KkTun5ePEGzxF7SrykCrktfvWcQc=,tag:/64Vb3hvDvIm39xsyEp8GA==,type:str]
    accessModes:
        - ENC[AES256_GCM,data:RU57nVGM1lQKlCOkLA==,iv:IP0Ufa9vvKIZM9CM7V0rjyY1yhSOcwgSLuoY2V9KYsc=,tag:ZZ0DR4UcB96DUXQtuejsiQ==,type:str]
    resources:
        requests:
            storage: ENC[AES256_GCM,data:mwRXPg==,iv:7b4S7ftWGfUZ2TU0WEJXma6xPa6q1tkOpDon0dFPyZQ=,tag:I9QpyJNO3IFRF6jZKlkBLQ==,type:str]
sops:
    age:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3bUsyMklRU1Y4V0hWWmJ5
            R1U0aEZWSkx1NmpWMmhHbG8ydWFSajBCSUNnCkFQZVoyeDBBdTJDc2wyc003UGhs
            T2d3Um80SDN4aTNPQkZwaXBOb2hzMFUKLS0tIFB6UzNyZ2UrOHdPV0U0bFc5WVNk
            aHRQNWdrOXQ1bHRWdHJRRlE5TWRBNncKdyWCe1pSEgEXcmOB+6tOITSIDnpswnCv
            uIUvD1FwCZ3OSZkWuG68Yln0x8345yc6z2U8HiPfc4OOYzg6lsU+9A==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-11-15T23:47:15Z"
    mac: ENC[AES256_GCM,data:2Cq/ubdl/+/JjUCeR2V24hJnVlok+Ngcgi7U5HyJPMftf9ZPS4evgIquvLfJR21FX6gH1fou6/HxdCUXqOBiDrPWLhoVSbOK+dUYYYVzcBhuxbW/fAOqvXuYmRCzoSzeafk3ihGIrqSznQmOlnCFJsGivtTO7KLLA+52My03ywQ=,iv:B8PIa4ktPvqCX4VDpoPPadC5q39ela7kUiQmajEl2zE=,tag:Ckem4WFkwnXKLqy+uwr4Ig==,type:str]
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.11.0
---
apiVersion: v1
kind: Service
metadata:
    labels:
        app: gitea
    name: gitea-internal-svc
    namespace: dev-stuff
    annotations:
        metallb.universe.tf/allow-shared-ip: internal
spec:
    type: LoadBalancer
    loadBalancerIP: ENC[AES256_GCM,data:fCwc7lUbpGSvBVoCqw==,iv:7O3lY9n439hnCWZGnN1uTUeMr8o9U9CzZaQT8LFOz9U=,tag:I1vK6w8PaUZvkXELkILwPQ==,type:str]
    ports:
        - port: ENC[AES256_GCM,data:qxGtUj8=,iv:r+nRIPrJJCvKbzsNjT/0KzFfLfJLQtT5MUjlAcQraUs=,tag:GpbYZ6nWpXZXu8Cjp1CWbg==,type:int]
          protocol: ENC[AES256_GCM,data:TXy2,iv:BIl4KhEzFbHQD6CkTrQDeGSnUOVItXsABfXr8pgqyVI=,tag:FxAoNGwRLw7/hAGRoEn5Gw==,type:str]
          targetPort: ENC[AES256_GCM,data:eHAF4w==,iv:RE0Xv8QuUsSKhV92r5fNT9vjJ6UzTe3zakz5MAwRA2E=,tag:MTn6RDaJn74GBmixKyebrw==,type:int]
    selector:
        app: ENC[AES256_GCM,data:BIaAp0s=,iv:+uHfYhauQWmR1Oa2TIjHz2rWh46buO6c1bMWuelit0o=,tag:erRy5tzpBuycUIBUfFQEvg==,type:str]
sops:
    age:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3bUsyMklRU1Y4V0hWWmJ5
            R1U0aEZWSkx1NmpWMmhHbG8ydWFSajBCSUNnCkFQZVoyeDBBdTJDc2wyc003UGhs
            T2d3Um80SDN4aTNPQkZwaXBOb2hzMFUKLS0tIFB6UzNyZ2UrOHdPV0U0bFc5WVNk
            aHRQNWdrOXQ1bHRWdHJRRlE5TWRBNncKdyWCe1pSEgEXcmOB+6tOITSIDnpswnCv
            uIUvD1FwCZ3OSZkWuG68Yln0x8345yc6z2U8HiPfc4OOYzg6lsU+9A==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-11-15T23:47:15Z"
    mac: ENC[AES256_GCM,data:2Cq/ubdl/+/JjUCeR2V24hJnVlok+Ngcgi7U5HyJPMftf9ZPS4evgIquvLfJR21FX6gH1fou6/HxdCUXqOBiDrPWLhoVSbOK+dUYYYVzcBhuxbW/fAOqvXuYmRCzoSzeafk3ihGIrqSznQmOlnCFJsGivtTO7KLLA+52My03ywQ=,iv:B8PIa4ktPvqCX4VDpoPPadC5q39ela7kUiQmajEl2zE=,tag:Ckem4WFkwnXKLqy+uwr4Ig==,type:str]
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.11.0
---
apiVersion: v1
kind: Service
metadata:
    labels:
        app: gitea
    name: gitea-external-svc
    namespace: dev-stuff
spec:
    type: ClusterIP
    ports:
        - port: ENC[AES256_GCM,data:0haYuA==,iv:mqMB98kKLgPX1SXNn6+tZPiTv8tKouTck5Zup+YJkJ8=,tag:xzYrSK1N7y/nAValPknx/A==,type:int]
          protocol: ENC[AES256_GCM,data:6uPR,iv:fROtBNZLIOkOG5kB+ueHWAH4wmCdIL5spx+4zP5XxPs=,tag:1JAGH9zcyOX5GRffaqkcWA==,type:str]
          targetPort: ENC[AES256_GCM,data:Q4zoaQ==,iv:kwY0e5s7t03oWfQB5kFNhyMhDmLMV6qyBSsHzqmGUR8=,tag:VVx5qltaGQGR7NRfx9b5gA==,type:int]
    selector:
        app: ENC[AES256_GCM,data:OeEQHKg=,iv:4l3dVzR4XY7RIdIRZWZrz9aeEzV2BFnyrTY8ZGUtESk=,tag:/LAE1e+hkeLE946sl8PXZw==,type:str]
sops:
    age:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3bUsyMklRU1Y4V0hWWmJ5
            R1U0aEZWSkx1NmpWMmhHbG8ydWFSajBCSUNnCkFQZVoyeDBBdTJDc2wyc003UGhs
            T2d3Um80SDN4aTNPQkZwaXBOb2hzMFUKLS0tIFB6UzNyZ2UrOHdPV0U0bFc5WVNk
            aHRQNWdrOXQ1bHRWdHJRRlE5TWRBNncKdyWCe1pSEgEXcmOB+6tOITSIDnpswnCv
            uIUvD1FwCZ3OSZkWuG68Yln0x8345yc6z2U8HiPfc4OOYzg6lsU+9A==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-11-15T23:47:15Z"
    mac: ENC[AES256_GCM,data:2Cq/ubdl/+/JjUCeR2V24hJnVlok+Ngcgi7U5HyJPMftf9ZPS4evgIquvLfJR21FX6gH1fou6/HxdCUXqOBiDrPWLhoVSbOK+dUYYYVzcBhuxbW/fAOqvXuYmRCzoSzeafk3ihGIrqSznQmOlnCFJsGivtTO7KLLA+52My03ywQ=,iv:B8PIa4ktPvqCX4VDpoPPadC5q39ela7kUiQmajEl2zE=,tag:Ckem4WFkwnXKLqy+uwr4Ig==,type:str]
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.11.0
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
    # Same namespace as the deployment
    namespace: dev-stuff
    # Name of the ingress (see kubectl get ingress -A)
    name: gitea-ingress
    annotations:
        # < use the nginx ingress controller
        kubernetes.io/ingress.class: nginx
        # < use letsencrypt-prod application in kubernetes to generate ssl certificate
        cert-manager.io/cluster-issuer: letsencrypt-prod
        nginx.ingress.kubernetes.io/proxy-body-size: 512m
spec:
    tls:
        - hosts:
            - ENC[AES256_GCM,data:g2VD5SvFqCoCEEt/ESmHGQpQoTR1mg5UzA==,iv:uG1TSeFwyqFzRVsDC6LPT+YvyFiZ8QNFhUTClWQZKN4=,tag:x0Em0GcW/TJe6+JyCso4qA==,type:comment]
            - ENC[AES256_GCM,data:B3qTAhKQMoAn8ZAcnfTo19ZDCgT07g==,iv:VdFcylX0RJMEHRQTcCTagMHYdkutGAbJdVPUtp+64Aw=,tag:zKK9jUdnEUiENFCTj4eAvQ==,type:str]
          #ENC[AES256_GCM,data:hvkZp/tkrjfutCmx3+LrQ2HUBCLjLiLg9AtraQLv64sTeu/yCXoFzMtxAzoUcj+6IGcwu5gFO7x0,iv:7NuQK6SocQrVU6LBOtaJEuPlHlT0DxFUoRtmpfGnOM8=,tag:OPHvB1IuSBWpMFAnouWLog==,type:comment]
          secretName: ENC[AES256_GCM,data:wdIXPLM5uDh/QWv8XsU=,iv:ALuAyGvo8/H31r4WTASHnMhXUmp2kIrhYOUWLivhhac=,tag:fgYfWe58i5Yb8Wurc/Avbw==,type:str]
    rules:
        - ENC[AES256_GCM,data:W1OwCFhCMP3QaRRXq0BhCx4DZLVIUbqV6A==,iv:5m4w5hhLlgwESdZdZZRUrkl5B4Njj3tyP48Q1NWPYZM=,tag:QJhaCgt4vd4h1usyNSjVfg==,type:comment]
        - host: ENC[AES256_GCM,data:WYaJXVIGoSawYR7tT3HU5C3+LM5Uag==,iv:72AvVc8rx7S1TeJlNecahNRtcv8PmDSkxn1j/UyI07M=,tag:w37+O/n29v61a6zAfQD08w==,type:str]
          http:
            paths:
                - ENC[AES256_GCM,data:bLpNP2SuYFRezqiZj6idydtXiYI09RmkUuGomJMxUv7ZDS7zAMC6+MNWolti16Ff0001P7StYmPhuHHzCSpzS7fZuA0F,iv:xh6GXt/YsxxqMYh+NrxUyK3LjMXVCl7/DNIVCrUqWmA=,tag:DeYcAV3Ri36F+JoF2khsYg==,type:comment]
                - path: ENC[AES256_GCM,data:gQ==,iv:8B8R1aus7CT4Tb5fmajFfpy94ZPQV2wwd+MXyeiH1mI=,tag:Nt9nnthqQR5NcV4wZHx+ww==,type:str]
                  pathType: ENC[AES256_GCM,data:lP2XFXl3,iv:4bd6BRDe+f5ePm4uptPBleH+WiJNI0SmWRe3gfuyQA8=,tag:0FgfkbbvGehFH9+lyYBF/w==,type:str]
                  backend:
                    service:
                        #ENC[AES256_GCM,data:HJeoMFIWR2a0u+Gb0U8jWefDoNzPiNjMF3jCQcpavdz4Cq8P6aMf1mrP9Avatcs2nx20UxsfXZgnbs2FCDtX,iv:d4EaqnIsBCeY2Tiw25LTsZsyILGY2HW86WNiLh8n/jQ=,tag:8fHdZpFXzBfl2OAAIBaj5g==,type:comment]
                        name: ENC[AES256_GCM,data:Xhb0bLXyhK07t1RpVGq8JIHX,iv:50QI5X0Q4QGgXvN7dOJUK50DC+MsbpdL72RkT4ExK/s=,tag:4Zg++ydDmkDERKBGn+NNdQ==,type:str]
                        port:
                            number: ENC[AES256_GCM,data:JTTTKA==,iv:PH9them3jeTiAA3rOOFFgK35hMMK38Mbq8cz2ds6Ymw=,tag:2uASGTj6yX0BlCer8erTig==,type:int]
sops:
    age:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3bUsyMklRU1Y4V0hWWmJ5
            R1U0aEZWSkx1NmpWMmhHbG8ydWFSajBCSUNnCkFQZVoyeDBBdTJDc2wyc003UGhs
            T2d3Um80SDN4aTNPQkZwaXBOb2hzMFUKLS0tIFB6UzNyZ2UrOHdPV0U0bFc5WVNk
            aHRQNWdrOXQ1bHRWdHJRRlE5TWRBNncKdyWCe1pSEgEXcmOB+6tOITSIDnpswnCv
            uIUvD1FwCZ3OSZkWuG68Yln0x8345yc6z2U8HiPfc4OOYzg6lsU+9A==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-11-15T23:47:15Z"
    mac: ENC[AES256_GCM,data:2Cq/ubdl/+/JjUCeR2V24hJnVlok+Ngcgi7U5HyJPMftf9ZPS4evgIquvLfJR21FX6gH1fou6/HxdCUXqOBiDrPWLhoVSbOK+dUYYYVzcBhuxbW/fAOqvXuYmRCzoSzeafk3ihGIrqSznQmOlnCFJsGivtTO7KLLA+52My03ywQ=,iv:B8PIa4ktPvqCX4VDpoPPadC5q39ela7kUiQmajEl2zE=,tag:Ckem4WFkwnXKLqy+uwr4Ig==,type:str]
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.11.0
---
apiVersion: apps/v1
kind: Deployment
metadata:
    name: gitea
    namespace: dev-stuff
    labels:
        app: gitea
spec:
    replicas: ENC[AES256_GCM,data:Cg==,iv:igdZ1EQytqp+1Q+B/k0M8i50Zh9PRiM6sGSrEmNUi5E=,tag:ugNGGDYQ+Lv1o0gO/bRE6g==,type:int]
    selector:
        matchLabels:
            app: ENC[AES256_GCM,data:PQsVlIk=,iv:O2qiUaPw6W27qXQgacm+q77gSLrahaFbAclDB76dX00=,tag:zZ6iOt3Hh71fxNlfpe2nnQ==,type:str]
    template:
        metadata:
            labels:
                app: gitea
                name: gitea
        spec:
            containers:
                - name: ENC[AES256_GCM,data:B5s777U=,iv:qjB9ElonmxP91QYAux4q6MiuOVfvv7L8tyVgDpstjv4=,tag:WnMafNn3OBDxjSHbJ/TDsg==,type:str]
                  image: ENC[AES256_GCM,data:TUBH+I/ZpNGZPCCergq+bywY,iv:88lihcWysyngagvl/uqpCjNW/QCgXaXH6au393BQSDw=,tag:d9IFRQDTIcKyVnKpTqnXIg==,type:str]
                  imagePullPolicy: ENC[AES256_GCM,data:0I2QQAnLKTuHlKVM,iv:QiPP34gU0OgmNT+7wqkIhSS7v8LDq2rH9EliVrNhuL4=,tag:9HUdJC6SsFo4trXJwmjSaw==,type:str]
                  ports:
                    - containerPort: ENC[AES256_GCM,data:Umq4cg==,iv:GLo50uJ5DLe7oOfTaf8n3TiLV1E1BB+4FT20zIFxCmY=,tag:M4xBuw9kiUTeFyuFTluXtg==,type:int]
                  volumeMounts:
                    - name: ENC[AES256_GCM,data:JWF5hGR0c75Eo2dn,iv:TV4C406aYXq4tBGl+c0o8eThMQEtVZTN2p7NerFLd0w=,tag:gnk4ShJV8FacMwsReh0bdg==,type:str]
                      mountPath: ENC[AES256_GCM,data:fF/OpYY=,iv:WBd+5CdlFJ13YHgiUHXkzr4pdML0GU2T8EixHgB06Z4=,tag:JiaZ/MG6M8qlArFC1ViBAQ==,type:str]
                  resources: {}
            volumes:
                - name: ENC[AES256_GCM,data:TkqCtge339hVgBwv,iv:qeMT2co5/Vl/38l0IWCXpS1rAOY/XJ/I+AWwpQi62xo=,tag:6fgRdyp2DqNLvAyRcb2fYw==,type:str]
                  persistentVolumeClaim:
                    claimName: ENC[AES256_GCM,data:G88ndv+HqUFb,iv:5BwocsEiQI5HS7/Aw6wFlgAgz2qOllTmoCBqBVZTRG4=,tag:2VQaHpg0/nfqO2lt9Xy4yA==,type:str]
sops:
    age:
        - recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3bUsyMklRU1Y4V0hWWmJ5
            R1U0aEZWSkx1NmpWMmhHbG8ydWFSajBCSUNnCkFQZVoyeDBBdTJDc2wyc003UGhs
            T2d3Um80SDN4aTNPQkZwaXBOb2hzMFUKLS0tIFB6UzNyZ2UrOHdPV0U0bFc5WVNk
            aHRQNWdrOXQ1bHRWdHJRRlE5TWRBNncKdyWCe1pSEgEXcmOB+6tOITSIDnpswnCv
            uIUvD1FwCZ3OSZkWuG68Yln0x8345yc6z2U8HiPfc4OOYzg6lsU+9A==
            -----END AGE ENCRYPTED FILE-----
    lastmodified: "2025-11-15T23:47:15Z"
    mac: ENC[AES256_GCM,data:2Cq/ubdl/+/JjUCeR2V24hJnVlok+Ngcgi7U5HyJPMftf9ZPS4evgIquvLfJR21FX6gH1fou6/HxdCUXqOBiDrPWLhoVSbOK+dUYYYVzcBhuxbW/fAOqvXuYmRCzoSzeafk3ihGIrqSznQmOlnCFJsGivtTO7KLLA+52My03ywQ=,iv:B8PIa4ktPvqCX4VDpoPPadC5q39ela7kUiQmajEl2zE=,tag:Ckem4WFkwnXKLqy+uwr4Ig==,type:str]
    unencrypted_regex: ^(apiVersion|metadata|kind|type)$
    version: 3.11.0