177 lines
13 KiB
YAML
177 lines
13 KiB
YAML
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: registry-prod-tls
|
|
namespace: dev-stuff
|
|
spec:
|
|
secretName: ENC[AES256_GCM,data:koAaCwdNyMrU83Bfg0QsDgY=,iv:a3mNO3/P7CP/eN7vwA708Yk/vUF62raLlHRkzb16Je4=,tag:SsPaE5gszVQC41MARwAQPQ==,type:str]
|
|
#ENC[AES256_GCM,data:iJhDh8qza+M=,iv:iAhqhCHwsmlkWMj1auS1vIxqptluw0g37mgfaQdzn0g=,tag:JdtNc6TdtF7qDvi3/RowXg==,type:comment]
|
|
duration: ENC[AES256_GCM,data:i/Zx3Yk=,iv:r+0T4YaLRPFMovPSVdFN5lIrCQsSi/1IOMQx3qevnTQ=,tag:XkSTa0SPNxj78GJonn/6kg==,type:str]
|
|
#ENC[AES256_GCM,data:0KdoYRjOah0=,iv:Xejuj8Xc90xx4RBQQih8bulh5Clrqg9ERCECxcpTWXo=,tag:DQNLPxxXYEA+6y+ek14/Yw==,type:comment]
|
|
renewBefore: ENC[AES256_GCM,data:4lERLQ==,iv:uR3KgDTf6piUbM4Zo3bJLhZ+WeAqb312xz+WHyATP3Y=,tag:AMg72A/Dgx+ng3paJELijQ==,type:str]
|
|
subject:
|
|
organizations:
|
|
- ENC[AES256_GCM,data:S4Lc,iv:vFL2BlmsVY9eEQiRDy1BAIHX15TrBk+mLyZz2HtBZgo=,tag:5mkP64QZSRRREUpsGFod6w==,type:str]
|
|
commonName: ENC[AES256_GCM,data:69cyZhkZWfhujK5F51TsimnQkMpybw==,iv:C66eiV1iSmla5rG4Fqvc3Di9N/F4NVCGqxzhMVDRGdI=,tag:M4Bl11NUpUmXAKYf6qRprA==,type:str]
|
|
isCA: ENC[AES256_GCM,data:fteqJbo=,iv:DEUUvm8ynmyVc+r7Q6Ug37YuBqqKdWaOTXa6VCC/Zdw=,tag:15CXS+dXYJgyKXWAktNuzw==,type:bool]
|
|
privateKey:
|
|
algorithm: ENC[AES256_GCM,data:+Fbe,iv:zlOC1NrhPceEVPDwG05gqbd72atHMvgiI9dlMlWxy/8=,tag:NxNV6TP0mqU0aNpYApJc4A==,type:str]
|
|
encoding: ENC[AES256_GCM,data:Vz/gEE4=,iv:SR4nVoCju5eVIpBDBd7iZZeObClsh3dpRqM0bSEKIMA=,tag:HK+J7VZJP4FWrLz5AVHejA==,type:str]
|
|
size: ENC[AES256_GCM,data:dTjblA==,iv:YaSYazAyUtyADWpr0hED/YRA8XQ4FGJjffb3G2xuvfo=,tag:VQcN85qceGvv4yIF7FPJLg==,type:int]
|
|
usages:
|
|
- ENC[AES256_GCM,data:5xylx2Du1LlBPY4=,iv:zH1KRlPSA7q86SvV9ZE33XSRMpLAFMzk1SMEUraTdgc=,tag:q/8239ZmcC39VVXoFCc6pw==,type:str]
|
|
- ENC[AES256_GCM,data:2MozNAaPEF0SWuY=,iv:E20vkx6vJ05dGriHgCdlBsgznpDeyBZ39la7Tv3asQg=,tag:frCsd+q5sozKiJwhWyoqCA==,type:str]
|
|
dnsNames:
|
|
- ENC[AES256_GCM,data:Ay9h275pV7AkfudZ4H1ScHMw8yrxOg==,iv:/4vEwn9FD5dPYoq8CKKXrPv7U/b5gjRLDhMB/vFSK7o=,tag:22g49cXudprBYqsiQbw1gw==,type:str]
|
|
issuerRef:
|
|
name: ENC[AES256_GCM,data:jW3xLJkawLqKeJCQdtEUtA==,iv:FA46uIux9BNMXSK7WMjGMUpFqTsCE4ufqSSlU6LoDKA=,tag:lfw/KvesEN+uGHrMWv4m3g==,type:str]
|
|
kind: ClusterIssuer
|
|
group: ENC[AES256_GCM,data:FANN/RloCpIpk6/blWcJ,iv:fQw5FrwN8hWP3M9FMLqGOSOrIRXWov+nI2mnfBG73iw=,tag:NuCX6wm7nW4uHp/r9GknHw==,type:str]
|
|
sops:
|
|
age:
|
|
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
|
enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpNlFxT3VwekdyK083WjA2
|
|
ZU01dUY0cEtYaE0ycjdLU01kUWpzOW4rdFNJClhhdDZ5Si9YQWw3VGt6ZnBJRHZ5
|
|
QUczVGZQVzdoZE51WmRiejVNbUdNbXcKLS0tIDJGcHBFcDBXTlBGZWM0V3RxNjUy
|
|
cDVIQUxyWDRDUEVhWVJvMUpIV3UyVVEK00NyfbOwUqWYYlfbzyB/hNX5d1Js8wjG
|
|
iNo8iVAqOg+7neFfOMhtIwDnRb1Nt0wk2lEXMnzCJOmg1+cDFgCc3g==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
lastmodified: "2025-11-15T23:47:15Z"
|
|
mac: ENC[AES256_GCM,data:eZijq3aSP750CS0RKWpEOt9SIiB2cLdz3fLKCfONthLPNAGD5DFVDgkSVw3lugLac70HCFHGVUXhNbOgjXy+qDuBhFSZprNuIIp5NVjPTz1AaP4e5J/YIi0ZP8+wu1ZXt0o6XvU+oydRfxFvFEZQwV4VCRKQ6rKLQoGpsxv7CVQ=,iv:wyScnestgA4Gr39uPSQlB43qBf9Li+0dvuXx0N5fAM0=,tag:znojX0C5f6uGEMgLY+y6bw==,type:str]
|
|
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
|
version: 3.11.0
|
|
---
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: container-registry-pvc
|
|
namespace: dev-stuff
|
|
spec:
|
|
storageClassName: ENC[AES256_GCM,data:srPddV7uqRE4+Q==,iv:OjWaSHagZ0xx7oCJ8QYCw3U7lti5/GaRTHm/ol86jEw=,tag:+kxQBWPX81ETL04SmQvc/A==,type:str]
|
|
accessModes:
|
|
- ENC[AES256_GCM,data:49AlTcEaFt0KKLTVcQ==,iv:OkCUkr7vr/Rch4hlFeAvhSku5lfVUpMsWrKHxYw8J7s=,tag:QQzpCAdT6+70IBhPoUsbMA==,type:str]
|
|
resources:
|
|
requests:
|
|
storage: ENC[AES256_GCM,data:0N2RSQ==,iv:prggrheNtX8ajhZXLt1236hSJtEj79xGqkdapdsS4ZE=,tag:Lh8x2qI2v+dKNq1eOeWAzg==,type:str]
|
|
sops:
|
|
age:
|
|
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
|
enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpNlFxT3VwekdyK083WjA2
|
|
ZU01dUY0cEtYaE0ycjdLU01kUWpzOW4rdFNJClhhdDZ5Si9YQWw3VGt6ZnBJRHZ5
|
|
QUczVGZQVzdoZE51WmRiejVNbUdNbXcKLS0tIDJGcHBFcDBXTlBGZWM0V3RxNjUy
|
|
cDVIQUxyWDRDUEVhWVJvMUpIV3UyVVEK00NyfbOwUqWYYlfbzyB/hNX5d1Js8wjG
|
|
iNo8iVAqOg+7neFfOMhtIwDnRb1Nt0wk2lEXMnzCJOmg1+cDFgCc3g==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
lastmodified: "2025-11-15T23:47:15Z"
|
|
mac: ENC[AES256_GCM,data:eZijq3aSP750CS0RKWpEOt9SIiB2cLdz3fLKCfONthLPNAGD5DFVDgkSVw3lugLac70HCFHGVUXhNbOgjXy+qDuBhFSZprNuIIp5NVjPTz1AaP4e5J/YIi0ZP8+wu1ZXt0o6XvU+oydRfxFvFEZQwV4VCRKQ6rKLQoGpsxv7CVQ=,iv:wyScnestgA4Gr39uPSQlB43qBf9Li+0dvuXx0N5fAM0=,tag:znojX0C5f6uGEMgLY+y6bw==,type:str]
|
|
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
|
version: 3.11.0
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
labels:
|
|
app: container-registry
|
|
name: container-registry-svc
|
|
namespace: dev-stuff
|
|
annotations:
|
|
metallb.universe.tf/allow-shared-ip: internal
|
|
spec:
|
|
type: LoadBalancer
|
|
loadBalancerIP: ENC[AES256_GCM,data:qcELC/MabXzgGZAa6A==,iv:RXrClvxmoBSo8D6JwI4DynPGC2H65CG/ERGDWzG6YY0=,tag:OCEnGS6/MfppZOK1DPeh6A==,type:str]
|
|
ports:
|
|
- port: ENC[AES256_GCM,data:JLqP7A==,iv:xTOutr9/736Di6L3GX1lKBKoSzEXZupdpXYPpib0tpE=,tag:F2lbSeM9yBw4dkxmc8kJdA==,type:int]
|
|
protocol: ENC[AES256_GCM,data:yXOU,iv:C4AP6RXypmx/g9yaVQSz4mKuQVe4EQkHhggBS5GrolY=,tag:VqQDEfu8xZquddDZ2LUM4g==,type:str]
|
|
targetPort: ENC[AES256_GCM,data:TQXQdg==,iv:pQHOaGw3SNGF4l5eQLKBciroP5c7QveXi2SseZNKXXQ=,tag:K5A2h5gdLApOIHRF3sxwZg==,type:int]
|
|
selector:
|
|
app: ENC[AES256_GCM,data:hfbtwWQXzTulZmxXvRN/BsrV,iv:dWtQPYJuJTfokjfFCy0tkoZh1uIYuFzB1GCq+07G4YE=,tag:OnZKIKPwIYsJS4ZP3ZlZ4w==,type:str]
|
|
sops:
|
|
age:
|
|
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
|
enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpNlFxT3VwekdyK083WjA2
|
|
ZU01dUY0cEtYaE0ycjdLU01kUWpzOW4rdFNJClhhdDZ5Si9YQWw3VGt6ZnBJRHZ5
|
|
QUczVGZQVzdoZE51WmRiejVNbUdNbXcKLS0tIDJGcHBFcDBXTlBGZWM0V3RxNjUy
|
|
cDVIQUxyWDRDUEVhWVJvMUpIV3UyVVEK00NyfbOwUqWYYlfbzyB/hNX5d1Js8wjG
|
|
iNo8iVAqOg+7neFfOMhtIwDnRb1Nt0wk2lEXMnzCJOmg1+cDFgCc3g==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
lastmodified: "2025-11-15T23:47:15Z"
|
|
mac: ENC[AES256_GCM,data:eZijq3aSP750CS0RKWpEOt9SIiB2cLdz3fLKCfONthLPNAGD5DFVDgkSVw3lugLac70HCFHGVUXhNbOgjXy+qDuBhFSZprNuIIp5NVjPTz1AaP4e5J/YIi0ZP8+wu1ZXt0o6XvU+oydRfxFvFEZQwV4VCRKQ6rKLQoGpsxv7CVQ=,iv:wyScnestgA4Gr39uPSQlB43qBf9Li+0dvuXx0N5fAM0=,tag:znojX0C5f6uGEMgLY+y6bw==,type:str]
|
|
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
|
version: 3.11.0
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: container-registry
|
|
namespace: dev-stuff
|
|
labels:
|
|
app: container-registry
|
|
spec:
|
|
replicas: ENC[AES256_GCM,data:jw==,iv:Rsz6H/UA3TLSGUkc3PtgFSrOk5wDUPAL/ftOGDGgGoI=,tag:0iLJFQJX9sGIffgcAQz3Cg==,type:int]
|
|
selector:
|
|
matchLabels:
|
|
app: ENC[AES256_GCM,data:pWtyFrDI2yRRLtoknXmJGpaR,iv:hXFCWZZQl1ZGZwTBPEYFsENtJ9B9Fh9CBRH2/2u5958=,tag:boolqVJSc37KfaDMOlwIMg==,type:str]
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: container-registry
|
|
name: container-registry
|
|
spec:
|
|
containers:
|
|
- name: ENC[AES256_GCM,data:BpF/yX4RL0c=,iv:XC8mbDITPDo6Dbs6Ha5+pIWTIYTc2HF+lSY+5Eo1Nk4=,tag:BBfQblYj7IFMXrLoyDXmwA==,type:str]
|
|
image: ENC[AES256_GCM,data:zipwd6ZOhzkS860Y,iv:xFc1ovDK27NMl96KgEcW6oaSR+gPZyKYIETlMn2C4y0=,tag:X36euzruHJqUoX8w1gYVTA==,type:str]
|
|
env:
|
|
- name: ENC[AES256_GCM,data:t4j3+qTtWZGRbyEVkg==,iv:hQofezg5mRvY4b/mwCLQROE4GzvH4MJFgTwxz3kzgwc=,tag:hrYFApsTUjUi8YrBEdh/Mw==,type:str]
|
|
value: ENC[AES256_GCM,data:LS78450jpdw=,iv:VZIMJIkmTwVjCEtcBg/8DBquHsvWst0Iy3g5lGDkns4=,tag:nC2mNbJg3CiKDOfSEdF+aQ==,type:str]
|
|
- name: ENC[AES256_GCM,data:cBFyYKQ4lFSOf77jVgJPL60iNJTb/FMixKGlLA==,iv:C/NOOXaRycit6uNmgvg4+3u6brh3nTxxb/iqPvDRKOc=,tag:w2VpQDHaWKv5gIA9ReP6Dw==,type:str]
|
|
value: ENC[AES256_GCM,data:wjXJLxF9b4sUC1TE5mk=,iv:JdOdHiIG22Y1GQgrNUMx1sGekl2X31PhglPMeX/tSFs=,tag:7OT0s8ITgj++wvYsle3llA==,type:str]
|
|
- name: ENC[AES256_GCM,data:07iNJJXkXcdnd28O9AA+5dUhpujMhqpUpg9V,iv:BRxGJR7rg6Sr+KcfRx2Bvm38t3OvtkcMJEymoYwzjLI=,tag:5kDrVNRx1RL+bt5pYdIn9w==,type:str]
|
|
value: ENC[AES256_GCM,data:E625x+2jeF3Qdx6Ax58=,iv:ThxJCCxRxwlEQ14/Rw1siADxuKPt0CJLpprjDIFLgcQ=,tag:974dgGCqpBX36Rbf4PcL2g==,type:str]
|
|
- name: ENC[AES256_GCM,data:83glVuOVShasLGEgjWzH+5JLp6tM,iv:pnvAyZm/TMOZg0QgBrrJW3ycy79FGkuBLzQVGTrryVc=,tag:tKySrxELQyXPIP4tZhsMoQ==,type:str]
|
|
value: ENC[AES256_GCM,data:aw8zqijTrabDJznsd9W+nA==,iv:pKD4wkc0V5ZOylMjE91LgfXPrwds0Y0VJsNYOd50qo0=,tag:t8fKbA3j+lGZygx0Ji4jeQ==,type:str]
|
|
- name: ENC[AES256_GCM,data:J2PcOxpou86lAyUY3qp0lcxdUhTFzNZCeCCO4so=,iv:KbQt3pzK6UYBHJpo5ZapLiV+UolpKjVMMZy42Wg8vqk=,tag:QzrI2EqV5XqsIoiT873Vcg==,type:str]
|
|
value: ENC[AES256_GCM,data:LSdTG3o50Ohf/jpBYdDpRA==,iv:qx8ESS0t4+PUCsu0kNvmTlD/7zZCSGcjYEd0VDARES0=,tag:SRlOK4ywttC08o5jlx+7gA==,type:str]
|
|
- name: ENC[AES256_GCM,data:URHhJggcEXH6rQ0lDk7dagqX,iv:9d+wBnKPcI4NaVl1bfh4Oldn/204EjajcxeHK1YyNcs=,tag:iU8vx2bJ2kqq4Nd/BjbKUQ==,type:str]
|
|
value: ENC[AES256_GCM,data:MYORYr+YsMSiB7jyBIv0FCvDpjNd8P+M+/SDMgR35Ryy+7A=,iv:wTxnMDIxrldYeujmHROXRV/H/wAiaGyOjFUAsf43KE0=,tag:ZKrA0XIfccWprP8uo8MzlQ==,type:str]
|
|
ports:
|
|
- containerPort: ENC[AES256_GCM,data:hfPIjQ==,iv:ofkiwkZYrgduefsZQrMBgdMPjq/pAw68TygudSnlJJ0=,tag:KXYcibGA4DzzO0hd6Zi/aw==,type:int]
|
|
volumeMounts:
|
|
- name: ENC[AES256_GCM,data:B4yAWiYyeEYrvAt8,iv:gOU+Jp62fF1kMJDO+NsiLfLHTbZxL8i9LPCvXbFYc+8=,tag:w9N84rHVNDVGL/k1ZK9n1A==,type:str]
|
|
mountPath: ENC[AES256_GCM,data:h3VCTnFCGp+P4yd9jh7av58=,iv:1rAystZ0mmrL7EcSNs1zMPrHNrfIrlT/7hJAzrLe320=,tag:eqRqQGhc1RSJKyUfKG2cuQ==,type:str]
|
|
- name: ENC[AES256_GCM,data:nCAP/MN6cNX1nR5TG30LJ8A=,iv:8h1z6IMQWmVa2GCPsJVZFfRcoNfsFIsWj1FtAhtaQVM=,tag:mzbcudjmVKS4Rk7v1ebNjw==,type:str]
|
|
mountPath: ENC[AES256_GCM,data:cEjeRSM0tEE=,iv:drtzeaWJ1/ap0yUHtp1bAlPATsCj81w2ny/Zj05jn+M=,tag:zI1LL80p/du3gx+4JPhyag==,type:str]
|
|
- name: ENC[AES256_GCM,data:0D1FLiqxrQXKg0rQvw==,iv:RqnTmh4n++4BFsOafyKRvBUVm3I3baTg0/eKF6ucYv8=,tag:S9S0XyfowVsU/eAoahmhQw==,type:str]
|
|
mountPath: ENC[AES256_GCM,data:o31ITbs=,iv:N24h0e3tg48QeZLSWorA72HC29vkOiJ4XjaUz2nG4So=,tag:3hsJR+TnPMrzKYUZdI9ejw==,type:str]
|
|
resources: {}
|
|
volumes:
|
|
- name: ENC[AES256_GCM,data:g9yP3L6l9Qturs+W,iv:HLIf95Sk51kzrqXNmnG7u9oDBWA37cfSl+nj04uGOms=,tag:Gq+bvg8iQTLFsWXtfMcssg==,type:str]
|
|
persistentVolumeClaim:
|
|
claimName: ENC[AES256_GCM,data:Ql2CNfEZLCxMlwxAwGK53JOcDtnnYg==,iv:A+j5SH7JbrzNXlYXW7PR3uOUL1oPn/EQ4uxUwkwj3vc=,tag:J1uze4b+fACx1sUKZks77Q==,type:str]
|
|
- name: ENC[AES256_GCM,data:YrnZq0T/gRQJliYWFXmeRgs=,iv:dfYFE63ZVFJ/z/ayZXVJQQCX9fHELslXwiwLjwYliBk=,tag:QLmrpzPxJzIOZ9C4K42Pow==,type:str]
|
|
secret:
|
|
secretName: ENC[AES256_GCM,data:TZEvY9tEfbP9Esv9WRAFmf0=,iv:N5E34bUPHgOQIU+GMCqIrKgCkt0Sy1lk1Eeo3wvbwu8=,tag:C1bmBDgYxQvKwGc2YeQHwQ==,type:str]
|
|
- name: ENC[AES256_GCM,data:1fi5Yf8HoxGt9RGc2Q==,iv:nb6Z8C33kobVa/bHWItLrL9LcmdZ7HNQf6i7FyJZlcw=,tag:fj+ZsflNzD4r7iBu+XZesg==,type:str]
|
|
secret:
|
|
secretName: ENC[AES256_GCM,data:is3i6FpybgV8d2PwYw==,iv:7mHC1w0/U16byw1npcOBw1pflr0TMPWYaaLgWSxK1YI=,tag:Xc3kPaBfEJpXEi6+Ump4Ug==,type:str]
|
|
sops:
|
|
age:
|
|
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
|
|
enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpNlFxT3VwekdyK083WjA2
|
|
ZU01dUY0cEtYaE0ycjdLU01kUWpzOW4rdFNJClhhdDZ5Si9YQWw3VGt6ZnBJRHZ5
|
|
QUczVGZQVzdoZE51WmRiejVNbUdNbXcKLS0tIDJGcHBFcDBXTlBGZWM0V3RxNjUy
|
|
cDVIQUxyWDRDUEVhWVJvMUpIV3UyVVEK00NyfbOwUqWYYlfbzyB/hNX5d1Js8wjG
|
|
iNo8iVAqOg+7neFfOMhtIwDnRb1Nt0wk2lEXMnzCJOmg1+cDFgCc3g==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
lastmodified: "2025-11-15T23:47:15Z"
|
|
mac: ENC[AES256_GCM,data:eZijq3aSP750CS0RKWpEOt9SIiB2cLdz3fLKCfONthLPNAGD5DFVDgkSVw3lugLac70HCFHGVUXhNbOgjXy+qDuBhFSZprNuIIp5NVjPTz1AaP4e5J/YIi0ZP8+wu1ZXt0o6XvU+oydRfxFvFEZQwV4VCRKQ6rKLQoGpsxv7CVQ=,iv:wyScnestgA4Gr39uPSQlB43qBf9Li+0dvuXx0N5fAM0=,tag:znojX0C5f6uGEMgLY+y6bw==,type:str]
|
|
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
|
|
version: 3.11.0
|