236 lines
15 KiB
YAML
236 lines
15 KiB
YAML
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: gitea-prod-tls
|
|
namespace: dev-stuff
|
|
spec:
|
|
secretName: ENC[AES256_GCM,data:vlfpbuXeUnZp8r0qOSY=,iv:/1PYIT9H5QahkY7vVEAaLSm7ASLe/d0buV5XmAYTbg0=,tag:lSzPBSgyb4bDnSsUuHtpOw==,type:str]
|
|
#ENC[AES256_GCM,data:FmDfjQ==,iv:8VnFnZrq249XY7GrpSQg7E81MqAwd6Ou/dHtoou+Atk=,tag:UuiZHq9lReyok7xvMHS/Lg==,type:comment]
|
|
duration: ENC[AES256_GCM,data:4o3lxXo=,iv:1fyVWfUjQy+XnKHx2VBa57v36uKnGs46q1nu30NJxsE=,tag:Y6yr3VZgKQmeZcTTkrzIvA==,type:str]
|
|
#ENC[AES256_GCM,data:RBziew==,iv:7rqhMKvhl4WrrBQVG2WZDTA9SH8vWWsHwHSYsaG075I=,tag:JDzvb3ESkjY1VXNSw6oyfA==,type:comment]
|
|
renewBefore: ENC[AES256_GCM,data:GfyFWQ==,iv:k/jwT4K8jrnDKwmyLT7IW8HLV5h5c6Mm3GD8EiU0WaM=,tag:b+FyMRQwa37ByGxNqgBiTg==,type:str]
|
|
subject:
|
|
organizations:
|
|
- ENC[AES256_GCM,data:VsJR,iv:ceyp37W2y1SLot7bk8VFxrao5pulskp8eDT1SZEyBpY=,tag:rsttNfPDADv7fInB8Sff6w==,type:str]
|
|
commonName: ENC[AES256_GCM,data:oQgM4m3PY/z2ydBIv8ev31/Gn0Jm1Q==,iv:2pdMdAOvq3MxZRyXiNaq4YxAbSRWCs0zCfc1VhoOEsc=,tag:rMKPK+wl/bwKFsOfYoAZ6A==,type:str]
|
|
isCA: ENC[AES256_GCM,data:XmBJnj4=,iv:04kZMpLeCI1Q3x4m2ZyXi8mC4l1E2nUWKrpU7aHKpE4=,tag:5v0+T0IF7JAUsscD6HSOSA==,type:bool]
|
|
privateKey:
|
|
algorithm: ENC[AES256_GCM,data:Fb5X,iv:5hSL8zWobZEcQuYEYezvbqB+6/i0SxRJ13X9RQy5r1Q=,tag:PDeK/I/5OUZD6dVzuX1N/Q==,type:str]
|
|
encoding: ENC[AES256_GCM,data:BxTqwQs=,iv:j9K80pHwpZUpdHqbZcmYZYPDJaTDE04p0CBXW5l4iSA=,tag:HpafaJ9mMQ050eSPKzBGPg==,type:str]
|
|
size: ENC[AES256_GCM,data:0k2Ijg==,iv:XXic+fKVFZ+hGFS2wn7rcD8UY4tVurpNo1LIG/EwsIg=,tag:iZkXRjDQTCFSwyV6GdYVHw==,type:int]
|
|
usages:
|
|
- ENC[AES256_GCM,data:9hQHCLEVJbqLSpg=,iv:t6oSCR5RqYr+TdDOC9Z/NFwZhAtaL9gm7yF19mfq/9o=,tag:nJip/NOnYbUm5mVRvPUbvQ==,type:str]
|
|
- ENC[AES256_GCM,data:myI16wtRsIBJh98=,iv:0vTJrI0S+wtqhFq4ViuvoBOI8aXgHGeOE9APsYYKsWA=,tag:9YPdkGQr0D9/V2TaravrSg==,type:str]
|
|
dnsNames:
|
|
- ENC[AES256_GCM,data:BXgpQzJCaART3tl7eCiNZgCRVsg9kA==,iv:6s3iqW1r9PPRHriYtTTarg4UGczj27mzKlaAPeH9EoQ=,tag:I6j6yYObIMgk9vN0duqckQ==,type:str]
|
|
issuerRef:
|
|
name: ENC[AES256_GCM,data:kOn24NXNwDp/yTO+NsAwQg==,iv:K4+GiYGeNF2KCKgA61IUcmHPHckXuXdGIBQzoeA6QWY=,tag:ZzZ7vysXhFYLFBO9x5Pz/Q==,type:str]
|
|
kind: ClusterIssuer
|
|
group: ENC[AES256_GCM,data:5ZZHlzJ+HBZYas9Aul2R,iv:gFe/kWjHCB7eJYlXLKzXOhL7zIaa5k77T2plXOy/IDo=,tag:OQ8AIth6a+XAcESGBo7gbQ==,type:str]
|
|
sops:
|
|
age:
|
|
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
|
enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3bUsyMklRU1Y4V0hWWmJ5
|
|
R1U0aEZWSkx1NmpWMmhHbG8ydWFSajBCSUNnCkFQZVoyeDBBdTJDc2wyc003UGhs
|
|
T2d3Um80SDN4aTNPQkZwaXBOb2hzMFUKLS0tIFB6UzNyZ2UrOHdPV0U0bFc5WVNk
|
|
aHRQNWdrOXQ1bHRWdHJRRlE5TWRBNncKdyWCe1pSEgEXcmOB+6tOITSIDnpswnCv
|
|
uIUvD1FwCZ3OSZkWuG68Yln0x8345yc6z2U8HiPfc4OOYzg6lsU+9A==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
lastmodified: "2025-11-15T23:47:15Z"
|
|
mac: ENC[AES256_GCM,data:2Cq/ubdl/+/JjUCeR2V24hJnVlok+Ngcgi7U5HyJPMftf9ZPS4evgIquvLfJR21FX6gH1fou6/HxdCUXqOBiDrPWLhoVSbOK+dUYYYVzcBhuxbW/fAOqvXuYmRCzoSzeafk3ihGIrqSznQmOlnCFJsGivtTO7KLLA+52My03ywQ=,iv:B8PIa4ktPvqCX4VDpoPPadC5q39ela7kUiQmajEl2zE=,tag:Ckem4WFkwnXKLqy+uwr4Ig==,type:str]
|
|
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
|
version: 3.11.0
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: gitea-pvc
|
|
namespace: dev-stuff
|
|
spec:
|
|
storageClassName: ENC[AES256_GCM,data:8pRS1GnPMdzkPQ==,iv:8PXHsrfjs4VbHc+KkTun5ePEGzxF7SrykCrktfvWcQc=,tag:/64Vb3hvDvIm39xsyEp8GA==,type:str]
|
|
accessModes:
|
|
- ENC[AES256_GCM,data:RU57nVGM1lQKlCOkLA==,iv:IP0Ufa9vvKIZM9CM7V0rjyY1yhSOcwgSLuoY2V9KYsc=,tag:ZZ0DR4UcB96DUXQtuejsiQ==,type:str]
|
|
resources:
|
|
requests:
|
|
storage: ENC[AES256_GCM,data:mwRXPg==,iv:7b4S7ftWGfUZ2TU0WEJXma6xPa6q1tkOpDon0dFPyZQ=,tag:I9QpyJNO3IFRF6jZKlkBLQ==,type:str]
|
|
sops:
|
|
age:
|
|
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
|
enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3bUsyMklRU1Y4V0hWWmJ5
|
|
R1U0aEZWSkx1NmpWMmhHbG8ydWFSajBCSUNnCkFQZVoyeDBBdTJDc2wyc003UGhs
|
|
T2d3Um80SDN4aTNPQkZwaXBOb2hzMFUKLS0tIFB6UzNyZ2UrOHdPV0U0bFc5WVNk
|
|
aHRQNWdrOXQ1bHRWdHJRRlE5TWRBNncKdyWCe1pSEgEXcmOB+6tOITSIDnpswnCv
|
|
uIUvD1FwCZ3OSZkWuG68Yln0x8345yc6z2U8HiPfc4OOYzg6lsU+9A==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
lastmodified: "2025-11-15T23:47:15Z"
|
|
mac: ENC[AES256_GCM,data:2Cq/ubdl/+/JjUCeR2V24hJnVlok+Ngcgi7U5HyJPMftf9ZPS4evgIquvLfJR21FX6gH1fou6/HxdCUXqOBiDrPWLhoVSbOK+dUYYYVzcBhuxbW/fAOqvXuYmRCzoSzeafk3ihGIrqSznQmOlnCFJsGivtTO7KLLA+52My03ywQ=,iv:B8PIa4ktPvqCX4VDpoPPadC5q39ela7kUiQmajEl2zE=,tag:Ckem4WFkwnXKLqy+uwr4Ig==,type:str]
|
|
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
|
version: 3.11.0
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
app: gitea
|
|
name: gitea-internal-svc
|
|
namespace: dev-stuff
|
|
annotations:
|
|
metallb.universe.tf/allow-shared-ip: internal
|
|
spec:
|
|
type: LoadBalancer
|
|
loadBalancerIP: ENC[AES256_GCM,data:fCwc7lUbpGSvBVoCqw==,iv:7O3lY9n439hnCWZGnN1uTUeMr8o9U9CzZaQT8LFOz9U=,tag:I1vK6w8PaUZvkXELkILwPQ==,type:str]
|
|
ports:
|
|
- port: ENC[AES256_GCM,data:qxGtUj8=,iv:r+nRIPrJJCvKbzsNjT/0KzFfLfJLQtT5MUjlAcQraUs=,tag:GpbYZ6nWpXZXu8Cjp1CWbg==,type:int]
|
|
protocol: ENC[AES256_GCM,data:TXy2,iv:BIl4KhEzFbHQD6CkTrQDeGSnUOVItXsABfXr8pgqyVI=,tag:FxAoNGwRLw7/hAGRoEn5Gw==,type:str]
|
|
targetPort: ENC[AES256_GCM,data:eHAF4w==,iv:RE0Xv8QuUsSKhV92r5fNT9vjJ6UzTe3zakz5MAwRA2E=,tag:MTn6RDaJn74GBmixKyebrw==,type:int]
|
|
selector:
|
|
app: ENC[AES256_GCM,data:BIaAp0s=,iv:+uHfYhauQWmR1Oa2TIjHz2rWh46buO6c1bMWuelit0o=,tag:erRy5tzpBuycUIBUfFQEvg==,type:str]
|
|
sops:
|
|
age:
|
|
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
|
enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3bUsyMklRU1Y4V0hWWmJ5
|
|
R1U0aEZWSkx1NmpWMmhHbG8ydWFSajBCSUNnCkFQZVoyeDBBdTJDc2wyc003UGhs
|
|
T2d3Um80SDN4aTNPQkZwaXBOb2hzMFUKLS0tIFB6UzNyZ2UrOHdPV0U0bFc5WVNk
|
|
aHRQNWdrOXQ1bHRWdHJRRlE5TWRBNncKdyWCe1pSEgEXcmOB+6tOITSIDnpswnCv
|
|
uIUvD1FwCZ3OSZkWuG68Yln0x8345yc6z2U8HiPfc4OOYzg6lsU+9A==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
lastmodified: "2025-11-15T23:47:15Z"
|
|
mac: ENC[AES256_GCM,data:2Cq/ubdl/+/JjUCeR2V24hJnVlok+Ngcgi7U5HyJPMftf9ZPS4evgIquvLfJR21FX6gH1fou6/HxdCUXqOBiDrPWLhoVSbOK+dUYYYVzcBhuxbW/fAOqvXuYmRCzoSzeafk3ihGIrqSznQmOlnCFJsGivtTO7KLLA+52My03ywQ=,iv:B8PIa4ktPvqCX4VDpoPPadC5q39ela7kUiQmajEl2zE=,tag:Ckem4WFkwnXKLqy+uwr4Ig==,type:str]
|
|
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
|
version: 3.11.0
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
app: gitea
|
|
name: gitea-external-svc
|
|
namespace: dev-stuff
|
|
spec:
|
|
type: ClusterIP
|
|
ports:
|
|
- port: ENC[AES256_GCM,data:0haYuA==,iv:mqMB98kKLgPX1SXNn6+tZPiTv8tKouTck5Zup+YJkJ8=,tag:xzYrSK1N7y/nAValPknx/A==,type:int]
|
|
protocol: ENC[AES256_GCM,data:6uPR,iv:fROtBNZLIOkOG5kB+ueHWAH4wmCdIL5spx+4zP5XxPs=,tag:1JAGH9zcyOX5GRffaqkcWA==,type:str]
|
|
targetPort: ENC[AES256_GCM,data:Q4zoaQ==,iv:kwY0e5s7t03oWfQB5kFNhyMhDmLMV6qyBSsHzqmGUR8=,tag:VVx5qltaGQGR7NRfx9b5gA==,type:int]
|
|
selector:
|
|
app: ENC[AES256_GCM,data:OeEQHKg=,iv:4l3dVzR4XY7RIdIRZWZrz9aeEzV2BFnyrTY8ZGUtESk=,tag:/LAE1e+hkeLE946sl8PXZw==,type:str]
|
|
sops:
|
|
age:
|
|
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
|
enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3bUsyMklRU1Y4V0hWWmJ5
|
|
R1U0aEZWSkx1NmpWMmhHbG8ydWFSajBCSUNnCkFQZVoyeDBBdTJDc2wyc003UGhs
|
|
T2d3Um80SDN4aTNPQkZwaXBOb2hzMFUKLS0tIFB6UzNyZ2UrOHdPV0U0bFc5WVNk
|
|
aHRQNWdrOXQ1bHRWdHJRRlE5TWRBNncKdyWCe1pSEgEXcmOB+6tOITSIDnpswnCv
|
|
uIUvD1FwCZ3OSZkWuG68Yln0x8345yc6z2U8HiPfc4OOYzg6lsU+9A==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
lastmodified: "2025-11-15T23:47:15Z"
|
|
mac: ENC[AES256_GCM,data:2Cq/ubdl/+/JjUCeR2V24hJnVlok+Ngcgi7U5HyJPMftf9ZPS4evgIquvLfJR21FX6gH1fou6/HxdCUXqOBiDrPWLhoVSbOK+dUYYYVzcBhuxbW/fAOqvXuYmRCzoSzeafk3ihGIrqSznQmOlnCFJsGivtTO7KLLA+52My03ywQ=,iv:B8PIa4ktPvqCX4VDpoPPadC5q39ela7kUiQmajEl2zE=,tag:Ckem4WFkwnXKLqy+uwr4Ig==,type:str]
|
|
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
|
version: 3.11.0
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
# Same namespace as the deployment
|
|
namespace: dev-stuff
|
|
# Name of the ingress (see kubectl get ingress -A)
|
|
name: gitea-ingress
|
|
annotations:
|
|
# < use the nginx ingress controller
|
|
kubernetes.io/ingress.class: nginx
|
|
# < use letsencrypt-prod application in kubernetes to generate ssl certificate
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
nginx.ingress.kubernetes.io/proxy-body-size: 512m
|
|
spec:
|
|
tls:
|
|
- hosts:
|
|
- ENC[AES256_GCM,data:g2VD5SvFqCoCEEt/ESmHGQpQoTR1mg5UzA==,iv:uG1TSeFwyqFzRVsDC6LPT+YvyFiZ8QNFhUTClWQZKN4=,tag:x0Em0GcW/TJe6+JyCso4qA==,type:comment]
|
|
- ENC[AES256_GCM,data:B3qTAhKQMoAn8ZAcnfTo19ZDCgT07g==,iv:VdFcylX0RJMEHRQTcCTagMHYdkutGAbJdVPUtp+64Aw=,tag:zKK9jUdnEUiENFCTj4eAvQ==,type:str]
|
|
#ENC[AES256_GCM,data:hvkZp/tkrjfutCmx3+LrQ2HUBCLjLiLg9AtraQLv64sTeu/yCXoFzMtxAzoUcj+6IGcwu5gFO7x0,iv:7NuQK6SocQrVU6LBOtaJEuPlHlT0DxFUoRtmpfGnOM8=,tag:OPHvB1IuSBWpMFAnouWLog==,type:comment]
|
|
secretName: ENC[AES256_GCM,data:wdIXPLM5uDh/QWv8XsU=,iv:ALuAyGvo8/H31r4WTASHnMhXUmp2kIrhYOUWLivhhac=,tag:fgYfWe58i5Yb8Wurc/Avbw==,type:str]
|
|
rules:
|
|
- ENC[AES256_GCM,data:W1OwCFhCMP3QaRRXq0BhCx4DZLVIUbqV6A==,iv:5m4w5hhLlgwESdZdZZRUrkl5B4Njj3tyP48Q1NWPYZM=,tag:QJhaCgt4vd4h1usyNSjVfg==,type:comment]
|
|
- host: ENC[AES256_GCM,data:WYaJXVIGoSawYR7tT3HU5C3+LM5Uag==,iv:72AvVc8rx7S1TeJlNecahNRtcv8PmDSkxn1j/UyI07M=,tag:w37+O/n29v61a6zAfQD08w==,type:str]
|
|
http:
|
|
paths:
|
|
- ENC[AES256_GCM,data:bLpNP2SuYFRezqiZj6idydtXiYI09RmkUuGomJMxUv7ZDS7zAMC6+MNWolti16Ff0001P7StYmPhuHHzCSpzS7fZuA0F,iv:xh6GXt/YsxxqMYh+NrxUyK3LjMXVCl7/DNIVCrUqWmA=,tag:DeYcAV3Ri36F+JoF2khsYg==,type:comment]
|
|
- path: ENC[AES256_GCM,data:gQ==,iv:8B8R1aus7CT4Tb5fmajFfpy94ZPQV2wwd+MXyeiH1mI=,tag:Nt9nnthqQR5NcV4wZHx+ww==,type:str]
|
|
pathType: ENC[AES256_GCM,data:lP2XFXl3,iv:4bd6BRDe+f5ePm4uptPBleH+WiJNI0SmWRe3gfuyQA8=,tag:0FgfkbbvGehFH9+lyYBF/w==,type:str]
|
|
backend:
|
|
service:
|
|
#ENC[AES256_GCM,data:HJeoMFIWR2a0u+Gb0U8jWefDoNzPiNjMF3jCQcpavdz4Cq8P6aMf1mrP9Avatcs2nx20UxsfXZgnbs2FCDtX,iv:d4EaqnIsBCeY2Tiw25LTsZsyILGY2HW86WNiLh8n/jQ=,tag:8fHdZpFXzBfl2OAAIBaj5g==,type:comment]
|
|
name: ENC[AES256_GCM,data:Xhb0bLXyhK07t1RpVGq8JIHX,iv:50QI5X0Q4QGgXvN7dOJUK50DC+MsbpdL72RkT4ExK/s=,tag:4Zg++ydDmkDERKBGn+NNdQ==,type:str]
|
|
port:
|
|
number: ENC[AES256_GCM,data:JTTTKA==,iv:PH9them3jeTiAA3rOOFFgK35hMMK38Mbq8cz2ds6Ymw=,tag:2uASGTj6yX0BlCer8erTig==,type:int]
|
|
sops:
|
|
age:
|
|
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
|
enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3bUsyMklRU1Y4V0hWWmJ5
|
|
R1U0aEZWSkx1NmpWMmhHbG8ydWFSajBCSUNnCkFQZVoyeDBBdTJDc2wyc003UGhs
|
|
T2d3Um80SDN4aTNPQkZwaXBOb2hzMFUKLS0tIFB6UzNyZ2UrOHdPV0U0bFc5WVNk
|
|
aHRQNWdrOXQ1bHRWdHJRRlE5TWRBNncKdyWCe1pSEgEXcmOB+6tOITSIDnpswnCv
|
|
uIUvD1FwCZ3OSZkWuG68Yln0x8345yc6z2U8HiPfc4OOYzg6lsU+9A==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
lastmodified: "2025-11-15T23:47:15Z"
|
|
mac: ENC[AES256_GCM,data:2Cq/ubdl/+/JjUCeR2V24hJnVlok+Ngcgi7U5HyJPMftf9ZPS4evgIquvLfJR21FX6gH1fou6/HxdCUXqOBiDrPWLhoVSbOK+dUYYYVzcBhuxbW/fAOqvXuYmRCzoSzeafk3ihGIrqSznQmOlnCFJsGivtTO7KLLA+52My03ywQ=,iv:B8PIa4ktPvqCX4VDpoPPadC5q39ela7kUiQmajEl2zE=,tag:Ckem4WFkwnXKLqy+uwr4Ig==,type:str]
|
|
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
|
version: 3.11.0
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: gitea
|
|
namespace: dev-stuff
|
|
labels:
|
|
app: gitea
|
|
spec:
|
|
replicas: ENC[AES256_GCM,data:Cg==,iv:igdZ1EQytqp+1Q+B/k0M8i50Zh9PRiM6sGSrEmNUi5E=,tag:ugNGGDYQ+Lv1o0gO/bRE6g==,type:int]
|
|
selector:
|
|
matchLabels:
|
|
app: ENC[AES256_GCM,data:PQsVlIk=,iv:O2qiUaPw6W27qXQgacm+q77gSLrahaFbAclDB76dX00=,tag:zZ6iOt3Hh71fxNlfpe2nnQ==,type:str]
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: gitea
|
|
name: gitea
|
|
spec:
|
|
containers:
|
|
- name: ENC[AES256_GCM,data:B5s777U=,iv:qjB9ElonmxP91QYAux4q6MiuOVfvv7L8tyVgDpstjv4=,tag:WnMafNn3OBDxjSHbJ/TDsg==,type:str]
|
|
image: ENC[AES256_GCM,data:TUBH+I/ZpNGZPCCergq+bywY,iv:88lihcWysyngagvl/uqpCjNW/QCgXaXH6au393BQSDw=,tag:d9IFRQDTIcKyVnKpTqnXIg==,type:str]
|
|
imagePullPolicy: ENC[AES256_GCM,data:0I2QQAnLKTuHlKVM,iv:QiPP34gU0OgmNT+7wqkIhSS7v8LDq2rH9EliVrNhuL4=,tag:9HUdJC6SsFo4trXJwmjSaw==,type:str]
|
|
ports:
|
|
- containerPort: ENC[AES256_GCM,data:Umq4cg==,iv:GLo50uJ5DLe7oOfTaf8n3TiLV1E1BB+4FT20zIFxCmY=,tag:M4xBuw9kiUTeFyuFTluXtg==,type:int]
|
|
volumeMounts:
|
|
- name: ENC[AES256_GCM,data:JWF5hGR0c75Eo2dn,iv:TV4C406aYXq4tBGl+c0o8eThMQEtVZTN2p7NerFLd0w=,tag:gnk4ShJV8FacMwsReh0bdg==,type:str]
|
|
mountPath: ENC[AES256_GCM,data:fF/OpYY=,iv:WBd+5CdlFJ13YHgiUHXkzr4pdML0GU2T8EixHgB06Z4=,tag:JiaZ/MG6M8qlArFC1ViBAQ==,type:str]
|
|
resources: {}
|
|
volumes:
|
|
- name: ENC[AES256_GCM,data:TkqCtge339hVgBwv,iv:qeMT2co5/Vl/38l0IWCXpS1rAOY/XJ/I+AWwpQi62xo=,tag:6fgRdyp2DqNLvAyRcb2fYw==,type:str]
|
|
persistentVolumeClaim:
|
|
claimName: ENC[AES256_GCM,data:G88ndv+HqUFb,iv:5BwocsEiQI5HS7/Aw6wFlgAgz2qOllTmoCBqBVZTRG4=,tag:2VQaHpg0/nfqO2lt9Xy4yA==,type:str]
|
|
sops:
|
|
age:
|
|
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
|
enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3bUsyMklRU1Y4V0hWWmJ5
|
|
R1U0aEZWSkx1NmpWMmhHbG8ydWFSajBCSUNnCkFQZVoyeDBBdTJDc2wyc003UGhs
|
|
T2d3Um80SDN4aTNPQkZwaXBOb2hzMFUKLS0tIFB6UzNyZ2UrOHdPV0U0bFc5WVNk
|
|
aHRQNWdrOXQ1bHRWdHJRRlE5TWRBNncKdyWCe1pSEgEXcmOB+6tOITSIDnpswnCv
|
|
uIUvD1FwCZ3OSZkWuG68Yln0x8345yc6z2U8HiPfc4OOYzg6lsU+9A==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
lastmodified: "2025-11-15T23:47:15Z"
|
|
mac: ENC[AES256_GCM,data:2Cq/ubdl/+/JjUCeR2V24hJnVlok+Ngcgi7U5HyJPMftf9ZPS4evgIquvLfJR21FX6gH1fou6/HxdCUXqOBiDrPWLhoVSbOK+dUYYYVzcBhuxbW/fAOqvXuYmRCzoSzeafk3ihGIrqSznQmOlnCFJsGivtTO7KLLA+52My03ywQ=,iv:B8PIa4ktPvqCX4VDpoPPadC5q39ela7kUiQmajEl2zE=,tag:Ckem4WFkwnXKLqy+uwr4Ig==,type:str]
|
|
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
|
version: 3.11.0
|