From 0add5629533502f07cccb19175dc73769ec04506 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 13 Nov 2024 11:03:59 +0000 Subject: [PATCH 01/40] chore(deps): update helm release argo-cd to v7.7.3 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index 46aa44f..84e0d1d 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -27,7 +27,7 @@ spec: sources: - repoURL: https://argoproj.github.io/argo-helm chart: argo-cd - targetRevision: 7.7.0 + targetRevision: 7.7.3 helm: releaseName: argo valueFiles: From ead63fa573692e95182d3ab0dd7338846ab680bd Mon Sep 17 00:00:00 2001 From: renovate Date: Wed, 13 Nov 2024 12:06:50 +0000 Subject: [PATCH 02/40] openproject: update image tag to 10 (done automagically via Woodpecker pipeline) --- openproject/values.yaml | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/openproject/values.yaml b/openproject/values.yaml index 84df56b..a1d4ead 100644 --- a/openproject/values.yaml +++ b/openproject/values.yaml @@ -1,7 +1,7 @@ image: registry: git.ar21.de repository: aaron/openproject - tag: '6' + tag: '10' appInit: resources: limits: @@ -20,12 +20,11 @@ workers: replicas: 2 environment: OPENPROJECT_DISABLE__PASSWORD__LOGIN: true - openproject: admin_user: - password_reset: "true" - name: "Aaron Riedel" - mail: "aaron@ar21.de" + password_reset: 'true' + name: Aaron Riedel + mail: aaron@ar21.de extraEnvVarsSecret: openproject-secret oidc: enabled: true @@ -38,7 +37,7 @@ openproject: tokenEndpoint: /application/o/token/ authorizationEndpoint: /application/o/authorize/ endSessionEndpoint: /application/o/openproject/end-session/ - scope: "[openid email profile]" + scope: '[openid email profile]' persistence: enabled: false s3: From 1107adf9d477f54cd70bc946c4e8478467135b69 Mon Sep 17 00:00:00 2001 From: Aaron Riedel Date: Sat, 16 Nov 2024 13:19:17 +0100 Subject: [PATCH 03/40] configure backups for openproject db --- openproject/db.yaml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/openproject/db.yaml b/openproject/db.yaml index 661b3c1..42a7d89 100644 --- a/openproject/db.yaml +++ b/openproject/db.yaml @@ -7,3 +7,17 @@ spec: instances: 3 storage: size: 1Gi + backup: + barmanObjectStore: + destinationPath: "s3://openproject/backups" + endpointURL: "https://fsn1.your-objectstorage.com" + s3Credentials: + accessKeyId: + name: openproject-secret + key: OPENPROJECT_FOG_CREDENTIALS_AWS__ACCESS__KEY__ID + secretAccessKey: + name: openproject-secret + key: OPENPROJECT_FOG_CREDENTIALS_AWS__SECRET__ACCESS__KEY + wal: + compression: gzip + retentionPolicy: "30d" From cf3820363849307b947aa02f584329487348833d Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 2 Dec 2024 15:04:21 +0000 Subject: [PATCH 04/40] chore(deps): update helm release argo-cd to v7.7.7 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index 84e0d1d..b7eff02 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -27,7 +27,7 @@ spec: sources: - repoURL: https://argoproj.github.io/argo-helm chart: argo-cd - targetRevision: 7.7.3 + targetRevision: 7.7.7 helm: releaseName: argo valueFiles: From 384751957bb664d0dfe52a6bd500d85a212dfec3 Mon Sep 17 00:00:00 2001 From: renovate Date: Wed, 11 Dec 2024 09:07:37 +0000 Subject: [PATCH 05/40] openproject: update image tag to 15 (done automagically via Woodpecker pipeline) --- openproject/values.yaml | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/openproject/values.yaml b/openproject/values.yaml index 84df56b..86832fb 100644 --- a/openproject/values.yaml +++ b/openproject/values.yaml @@ -1,7 +1,7 @@ image: registry: git.ar21.de repository: aaron/openproject - tag: '6' + tag: '15' appInit: resources: limits: @@ -20,12 +20,11 @@ workers: replicas: 2 environment: OPENPROJECT_DISABLE__PASSWORD__LOGIN: true - openproject: admin_user: - password_reset: "true" - name: "Aaron Riedel" - mail: "aaron@ar21.de" + password_reset: 'true' + name: Aaron Riedel + mail: aaron@ar21.de extraEnvVarsSecret: openproject-secret oidc: enabled: true @@ -38,7 +37,7 @@ openproject: tokenEndpoint: /application/o/token/ authorizationEndpoint: /application/o/authorize/ endSessionEndpoint: /application/o/openproject/end-session/ - scope: "[openid email profile]" + scope: '[openid email profile]' persistence: enabled: false s3: From b20d7edc4ea425531f8d1e0b617350a7300a3a98 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 12 Dec 2024 06:05:36 +0000 Subject: [PATCH 06/40] chore(deps): update helm release argo-cd to v7.7.10 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index b7eff02..da6f84b 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -27,7 +27,7 @@ spec: sources: - repoURL: https://argoproj.github.io/argo-helm chart: argo-cd - targetRevision: 7.7.7 + targetRevision: 7.7.10 helm: releaseName: argo valueFiles: From b004f92b3a477e0759aedc73692fd9473beaa5a0 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 12 Dec 2024 15:04:25 +0000 Subject: [PATCH 07/40] chore(deps): update helm release openproject to v9 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index b7eff02..3b9e7ba 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -175,7 +175,7 @@ spec: sources: - repoURL: https://charts.openproject.org chart: openproject - targetRevision: 8.3.2 + targetRevision: 9.3.0 helm: releaseName: openproject valueFiles: From 06251562bd2edfed082faa2cb6a5c06879e01d54 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Sat, 21 Dec 2024 13:03:57 +0000 Subject: [PATCH 08/40] chore(deps): update helm release argo-cd to v7.7.11 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index ea0c8c8..521f930 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -27,7 +27,7 @@ spec: sources: - repoURL: https://argoproj.github.io/argo-helm chart: argo-cd - targetRevision: 7.7.10 + targetRevision: 7.7.11 helm: releaseName: argo valueFiles: From e9dd5d63a5b944c9e84e8bc9bfe709e6e66181d3 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 23 Dec 2024 18:04:17 +0000 Subject: [PATCH 09/40] chore(deps): update helm release cloudnative-pg to v0.23.0 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index 521f930..e37e2d6 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -153,7 +153,7 @@ spec: sources: - chart: cloudnative-pg repoURL: https://cloudnative-pg.io/charts - targetRevision: 0.22.1 + targetRevision: 0.23.0 helm: releaseName: cloudnative-pg destination: From 05e13abaa5ce28a951d134aa26a7c15418613840 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 7 Jan 2025 13:05:05 +0000 Subject: [PATCH 10/40] chore(deps): update helm release argo-cd to v7.7.14 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index 521f930..5a4e2d5 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -27,7 +27,7 @@ spec: sources: - repoURL: https://argoproj.github.io/argo-helm chart: argo-cd - targetRevision: 7.7.11 + targetRevision: 7.7.14 helm: releaseName: argo valueFiles: From 6725d790e880f153ecb85e3f8790844f5d77d2c7 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 7 Jan 2025 15:04:34 +0000 Subject: [PATCH 11/40] chore(deps): update helm release openproject to v9.4.0 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index 521f930..65a189d 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -175,7 +175,7 @@ spec: sources: - repoURL: https://charts.openproject.org chart: openproject - targetRevision: 9.3.0 + targetRevision: 9.4.0 helm: releaseName: openproject valueFiles: From 8cbd4eb3fc26b6a0c275f376a9e3966c3a325888 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 13 Jan 2025 14:05:08 +0000 Subject: [PATCH 12/40] chore(deps): update helm release openproject to v9.4.1 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index c435fdb..10f5705 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -175,7 +175,7 @@ spec: sources: - repoURL: https://charts.openproject.org chart: openproject - targetRevision: 9.4.0 + targetRevision: 9.4.1 helm: releaseName: openproject valueFiles: From 2885b224eeac21b3b30585d2f6354374daf573ac Mon Sep 17 00:00:00 2001 From: renovate Date: Mon, 13 Jan 2025 14:07:22 +0000 Subject: [PATCH 13/40] openproject: update image tag to 17 (done automagically via Woodpecker pipeline) --- openproject/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openproject/values.yaml b/openproject/values.yaml index 86832fb..68f8427 100644 --- a/openproject/values.yaml +++ b/openproject/values.yaml @@ -1,7 +1,7 @@ image: registry: git.ar21.de repository: aaron/openproject - tag: '15' + tag: '17' appInit: resources: limits: From 017bb61d82dc17bfe980e7e0d6b464cc38cb0959 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 14 Jan 2025 11:05:32 +0000 Subject: [PATCH 14/40] chore(deps): update helm release argo-cd to v7.7.16 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index c435fdb..c0cae38 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -27,7 +27,7 @@ spec: sources: - repoURL: https://argoproj.github.io/argo-helm chart: argo-cd - targetRevision: 7.7.14 + targetRevision: 7.7.16 helm: releaseName: argo valueFiles: From b04c8d915464d08afc6293105a2d761724d037d1 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 22 Jan 2025 08:04:35 +0000 Subject: [PATCH 15/40] chore(deps): update helm release openproject to v9.5.0 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index dfba5a1..409ca7e 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -175,7 +175,7 @@ spec: sources: - repoURL: https://charts.openproject.org chart: openproject - targetRevision: 9.4.1 + targetRevision: 9.5.0 helm: releaseName: openproject valueFiles: From b4db8b2103b5f6873e824cac21f91f7b2cc5dcc8 Mon Sep 17 00:00:00 2001 From: renovate Date: Wed, 22 Jan 2025 09:07:49 +0000 Subject: [PATCH 16/40] openproject: update image tag to 19 (done automagically via Woodpecker pipeline) --- openproject/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openproject/values.yaml b/openproject/values.yaml index 68f8427..041b992 100644 --- a/openproject/values.yaml +++ b/openproject/values.yaml @@ -1,7 +1,7 @@ image: registry: git.ar21.de repository: aaron/openproject - tag: '17' + tag: '19' appInit: resources: limits: From c200c7395a35a5fc5ff064bc1f1d62504d65665e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 28 Jan 2025 10:04:38 +0000 Subject: [PATCH 17/40] chore(deps): update helm release argo-cd to v7.7.21 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index 409ca7e..c7a452c 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -27,7 +27,7 @@ spec: sources: - repoURL: https://argoproj.github.io/argo-helm chart: argo-cd - targetRevision: 7.7.16 + targetRevision: 7.7.21 helm: releaseName: argo valueFiles: From d27b8624d37265e50011cf19f777bbd41e1b7a1c Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 6 Feb 2025 18:07:32 +0000 Subject: [PATCH 18/40] chore(deps): update helm release argo-cd to v7.8.2 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index c7a452c..a5dee91 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -27,7 +27,7 @@ spec: sources: - repoURL: https://argoproj.github.io/argo-helm chart: argo-cd - targetRevision: 7.7.21 + targetRevision: 7.8.2 helm: releaseName: argo valueFiles: From 4cb345f3e018521aa5bed1715b2a9d2222f26076 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Tue, 11 Feb 2025 13:06:09 +0000 Subject: [PATCH 19/40] chore(deps): update helm release openproject to v9.6.0 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index c7a452c..523e8de 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -175,7 +175,7 @@ spec: sources: - repoURL: https://charts.openproject.org chart: openproject - targetRevision: 9.5.0 + targetRevision: 9.6.0 helm: releaseName: openproject valueFiles: From 2c32d7d0211700c1a08c9cfa29458bc0707239d2 Mon Sep 17 00:00:00 2001 From: aaron Date: Wed, 12 Feb 2025 19:03:28 +0000 Subject: [PATCH 20/40] openproject: update image tag to 24 (done automagically via Woodpecker pipeline) --- openproject/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openproject/values.yaml b/openproject/values.yaml index 041b992..8050c78 100644 --- a/openproject/values.yaml +++ b/openproject/values.yaml @@ -1,7 +1,7 @@ image: registry: git.ar21.de repository: aaron/openproject - tag: '19' + tag: '24' appInit: resources: limits: From 2ef7754b99d9280685879b4ef87a6f9309500e11 Mon Sep 17 00:00:00 2001 From: Aaron Riedel Date: Thu, 13 Feb 2025 20:07:56 +0100 Subject: [PATCH 21/40] temporary move to host cluster --- .sops.yaml | 2 ++ app-files/apps.yaml | 74 ++++++++++++++++++++--------------------- argocd/secret.yaml | 29 ++++++++++------ argocd/sops-secret.yaml | 29 ++++++++++------ drone/secret.yaml | 29 ++++++++++------ openproject/secret.yaml | 29 ++++++++++------ surveybot/secret.yaml | 29 ++++++++++------ 7 files changed, 134 insertions(+), 87 deletions(-) diff --git a/.sops.yaml b/.sops.yaml index 2fd620c..964334c 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -2,6 +2,7 @@ keys: - &argo age14uxgmvw26e7f82gkvxl0zwnfc5l75rdn5sms4zj0xrtrnlgn4qlsqh3kkt - &aaron age1z5wtjmk0jw0j9qz9k5rrnp30nzqxrl3v6wgl7eryvqus28zekp4qpx9jc2 + - &argo-yolokube age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz creation_rules: - path_regex: .* encrypted_regex: ^(data|stringData)$ @@ -9,3 +10,4 @@ creation_rules: - age: - *argo - *aaron + - *argo-yolokube diff --git a/app-files/apps.yaml b/app-files/apps.yaml index 058b197..fd12971 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -2,7 +2,7 @@ apiVersion: argoproj.io/v1alpha1 kind: Application metadata: - name: k8s-deployments-self + name: aaron-k8s-deployments-self namespace: argocd spec: project: default @@ -17,41 +17,41 @@ spec: automated: prune: false --- -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: argocd - namespace: argocd -spec: - project: default - sources: - - repoURL: https://argoproj.github.io/argo-helm - chart: argo-cd - targetRevision: 7.8.2 - helm: - releaseName: argo - valueFiles: - - $values/argocd/values.yaml - - repoURL: https://git.ar21.de/aaron/k8s-deployments.git - targetRevision: HEAD - ref: values - - repoURL: https://git.ar21.de/aaron/k8s-deployments.git - targetRevision: HEAD - path: argocd - destination: - server: https://kubernetes.default.svc - namespace: argocd - syncPolicy: - syncOptions: - - CreateNamespace=true - automated: - selfHeal: true - prune: false +#apiVersion: argoproj.io/v1alpha1 +#kind: Application +#metadata: +# name: argocd +# namespace: argocd +#spec: +# project: default +# sources: +# - repoURL: https://argoproj.github.io/argo-helm +# chart: argo-cd +# targetRevision: 7.8.2 +# helm: +# releaseName: argo +# valueFiles: +# - $values/argocd/values.yaml +# - repoURL: https://git.ar21.de/aaron/k8s-deployments.git +# targetRevision: HEAD +# ref: values +# - repoURL: https://git.ar21.de/aaron/k8s-deployments.git +# targetRevision: HEAD +# path: argocd +# destination: +# server: https://kubernetes.default.svc +# namespace: argocd +# syncPolicy: +# syncOptions: +# - CreateNamespace=true +# automated: +# selfHeal: true +# prune: false --- apiVersion: argoproj.io/v1alpha1 kind: Application metadata: - name: drone-runner + name: aaron-drone-runner namespace: argocd spec: project: default @@ -86,7 +86,7 @@ spec: apiVersion: argoproj.io/v1alpha1 kind: Application metadata: - name: hoylogo + name: aaron-hoylogo namespace: argocd spec: project: default @@ -106,7 +106,7 @@ spec: apiVersion: argoproj.io/v1alpha1 kind: Application metadata: - name: hoylogo-staging + name: aaron-hoylogo-staging namespace: argocd spec: project: default @@ -126,7 +126,7 @@ spec: apiVersion: argoproj.io/v1alpha1 kind: Application metadata: - name: surveybot + name: aaron-surveybot namespace: argocd spec: project: default @@ -146,7 +146,7 @@ spec: apiVersion: argoproj.io/v1alpha1 kind: Application metadata: - name: cloudnative-pg + name: aaron-cloudnative-pg namespace: argocd spec: project: default @@ -168,7 +168,7 @@ spec: apiVersion: argoproj.io/v1alpha1 kind: Application metadata: - name: openproject + name: aaron-openproject namespace: argocd spec: project: default diff --git a/argocd/secret.yaml b/argocd/secret.yaml index d552f0b..ceff9d7 100644 --- a/argocd/secret.yaml +++ b/argocd/secret.yaml @@ -18,20 +18,29 @@ sops: - recipient: age14uxgmvw26e7f82gkvxl0zwnfc5l75rdn5sms4zj0xrtrnlgn4qlsqh3kkt enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlaUIvZmc3cFcxSExFcjhC - cXVNaU5TdVpGR09jTkIzWHNrTHhkSWV6ZXlvClArWGFwNlhtbzJVWUNIQXlCNlEr - aWtqMHdyNHJNTjM5dFQxN1J0QWtHTW8KLS0tIFBnWmI2NFhERWRISmVuVjhTK1E0 - TmpCTWY5T1QxWnFlZG1TRUNuN1RTNmMKpadrE3scJFXK7qc5WADHtAJ4LCSvzsd9 - j3Ew0vCLEVTjxON6rBD6k3KqZdIzQEJnDNJWUiPUaoPP+1FIl2cxvg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAySmFSTW5lQ0F2RDE5S2JT + Y0s2OTNxdDdzZUNOaDYzRnFZa2lHZ05ZQ1c0Ckp0R0hXbXE0QjUxYjhsL29ibHRz + dTlwcEtZZ212U0YwZ2cwQU1xOEhZR2MKLS0tIFlSZWV2U0xBMS9yWFV1cHpBbzd6 + bjduYmpOV3l1L3NvQmtjQWtrR2UrMWMKZg1MuawTn3qCPPxCvg8qojSC9yMn0h7o + B0Ca87bLIZmlRKA+FUEnjsO7i1HT9/WdX56h86DT49EvP12eW2hfNA== -----END AGE ENCRYPTED FILE----- - recipient: age1z5wtjmk0jw0j9qz9k5rrnp30nzqxrl3v6wgl7eryvqus28zekp4qpx9jc2 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnVnBnRlZlanI5MGFvQlpO - TEdldzQ1RkV3N3VwcUo1WXNBaGlSRFVqS1Y0CkU3RzUzSzBtU0dkZ1M5YXN6eXpL - OE5sTmc2Q2I2VnBna1lHYjQ3ak4zZ2sKLS0tIHVvelVTU29GWkVNeFdOLzJMdEY5 - UDFQL2pGNTRlcURqcFZkTG12YjRmQUkKDe7jb3TtIJXIQfDs+VuIHFZjtnKfC6Sc - caPhCC6KBejq5hyJXSOHXh6n+xYshNkzEkHp90gLY41XFiAPHU6Sfg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNMmhHakx0dVNMakxESVY1 + U0ZZTnUyL2xOY3N6UW9sUFRyVEtXV2pET0JFCm5aR1k3aUxqaTFuZHpDeC9vMkUr + VHVSeVhScVdOaUlFYzVWaXUxVVZkQmMKLS0tIE1hVnJTa3FaTS84amNRMHVoZC9Y + Z0pGdzBocDlNNjlFY3FmN2NtM2ZaZUkKKaqAS0IOEJdt7kjS92cC4hZg7cs5jXOl + /xBDHewkugMXGA/mUhqLPYvUKer/Z3tIzwMgM4LSCxS/akvo295NrQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrQVplZFdkNzExb1p0dGNS + Rlc3SUVuejBZanJSTmRzTUFNUk5oVjZKSUdvCjFiMS9EU1ZqdE9iWTBlUHVPTWxJ + TmxJYTZjTWFWSVBVZzlWTzk5S2o0YW8KLS0tIFo3N2hvbndLN1dUOVJMTHJtRVFn + OVlCeG5mYVhWeUt2Q3NNNVNXL21uQXMKpUQ/sMaQMB9Pe7ZKxLuSYdCf2k7vDjF8 + 31hw6aYbMtPLYLXsOtJbU+DXlLenoljfD04xdT9PcTaHKrVU+3ayag== -----END AGE ENCRYPTED FILE----- lastmodified: "2024-11-04T19:32:15Z" mac: ENC[AES256_GCM,data:pzukaPYOzoo3vsXpwMiIpXCuOGy2MlWAsAuPvjsDimKb5kvYeZiVKhiT2BID6TtEcGL0FpX6pyrwl6c+lwK+5fcsKRGWPLowZ47RAQxnctieRH+QneMTnmIHI6Ex0PmDPasnG1EMoXyitGDNO7ouEk1ie0AK9z9+xVeyXCtUCRg=,iv:CzUiJmvUBjpwVmf0QW1X7b1CsQlSMX2fwnBHoqlRbo0=,tag:5yxJZOzuQ720YEQAbaHY8A==,type:str] diff --git a/argocd/sops-secret.yaml b/argocd/sops-secret.yaml index 8832f72..88785fd 100644 --- a/argocd/sops-secret.yaml +++ b/argocd/sops-secret.yaml @@ -15,20 +15,29 @@ sops: - recipient: age14uxgmvw26e7f82gkvxl0zwnfc5l75rdn5sms4zj0xrtrnlgn4qlsqh3kkt enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkenl5TnBHSWtXTU51TnZa - Z1pReHZlV0pPRzRsQ0RxUmsvWVI1b2RMeGljCmdSWDllRnBMSnlVSksycDI3cVVZ - TmExeEtuWStYSi9Ub0VCZS90MzZFZjgKLS0tIHEvSm5vTVVWdkRyOWNuRlhINzZY - RnRLR1grWm02UVE3TFhid3p3RHVSNlEK1fzRPAgFJmV3zEgX5FNNdV1zfd/Tv1q3 - g8HEyBgyfBAm6SXIB4Z3uTGJh9rJ9mPuTecFkiThn6WtSJJHRgQ7lQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzZlJpWjJuVDZTRHp2eEg4 + aE5jNnJzRXRSTVFkNG9tVFEyYUlobmNCYUc0CkE3bDVqRWhmL0liYlFIK2lObVc1 + QnVWNis5NG1rVU14cnBwOU0vZ2Q0R0kKLS0tIEdwYVZCTFB1alVCdVB1ZTl3YXVz + MmdWbHhxblN0WlRUeFdrSmdzdWVXNkkK3MATwPKE9ss/bbhuvBBFSSSSMn4KB7vZ + Z1hdYFrw8mdIUTYoH6ro9ny+no1pq7fvFyDbv4Pynf0kAHNJx4vIZg== -----END AGE ENCRYPTED FILE----- - recipient: age1z5wtjmk0jw0j9qz9k5rrnp30nzqxrl3v6wgl7eryvqus28zekp4qpx9jc2 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwSDV6VU92dXM5QTNSdmps - S3JCL2xZVERBOTZHZmlwVFptczZWMmpkZlIwCkp1TW42NWJveHdZOHp4cXY3eEpM - UkIzUWloNDJLQXRWM0g0ZzhHTmVyczQKLS0tIEE0d082L3g5MENlOTZFYkNtOGFB - NnRtdyttNjNWaGlOd09SdGhXZnZ2VE0K3bKDIJO2RQPY+1/p7nlwzZraPVnW+8L+ - wY1MoIdwygMcH5tmo0Jy3sLWMupUHQXQM9CX933wTATRPJtojLS4HA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQbjNVTDhma1k5ekR1Rkh3 + OER0dG1EK2NFa2xDK2NienVOMFNuM29vcXk4Ck95UDJubUdkbGJMQWNOTi9sRUt5 + ZUhlMHVoR3FpcksrMmV5eThGUU9OVE0KLS0tIDdnWW5iWjJDamtBSzhONHlyTTRs + cG10UDNZdjV4VWlsR1ZHR3VFNEc3bzQKjkPqFICUxFxUog4r45A+QAQJFXt6tqtq + T/cjR28E1mJIHnjiIVl92PlnRRPOZ6C5h1laaJeAIQdKdrOnQiuueg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkcTd0aU5JNVR0MXBNemxM + QUV2SG8wQWM1WU40S2ZBUW5xczhpN0lwMUg0CmJIVmpOUEVacE5DbE94RjEvU1oz + NEpDdll0OUZvcVVBQm1EVDkxUHM0cTAKLS0tIGZVNEVmWFlkMG9IMWxvcy81YTdS + eTA0bzV4VXYzOHRuUHJFSHQ0Q2tNclkKWMstuxBh2gVSnL5UfH3sDBfeO5BktAcQ + hgOO9oTnR2G90T8DVgx3AfroEe71rOXbhq8/OlyveDFRrxnF5SzQdg== -----END AGE ENCRYPTED FILE----- lastmodified: "2024-11-04T19:39:31Z" mac: ENC[AES256_GCM,data:OEeKuRW4Wvkqd/aafrvhNQxCQmuose5b/PfzxGh5a0+cN5ORib819ksjpLu78AL2rOhc0qRff8hi8TgWpoyBP7BiihpmCxZGFabITTAbH8x0Nacn3fef30K4Yw8AB7gLXrN1fwA9PLxfFoqmzsPnMh7xpEKMEKq1T0/ijqvmGJM=,iv:BM5gC/Vi4COBSFC/BHxV+bv8WXDwF+6eEx64ROIqpd4=,tag:WxwbtnYxa2okLdWUxWI7Yw==,type:str] diff --git a/drone/secret.yaml b/drone/secret.yaml index 26fc6c3..817abd8 100644 --- a/drone/secret.yaml +++ b/drone/secret.yaml @@ -15,20 +15,29 @@ sops: - recipient: age14uxgmvw26e7f82gkvxl0zwnfc5l75rdn5sms4zj0xrtrnlgn4qlsqh3kkt enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBycHkzcHNDOVdBYjJLRGpz - MkZ5T1UwOEEwTG44aGVuWk5zcnV2NlFPK0NRCkh0VVIzOVh2dWlaWG1hVmJQRE1p - VmhrNERFMHBpS2RTM3EySXdTSExmY3cKLS0tIFpWK3hMUG1TS0dTcTU2VUlkemNt - WlNZY0JmbVFWaVgxaUFlUU55THlRb0UK+P9mB8LDRFlnvYn0CXxzLSa8rB+ms2WF - INPTca+SW4sC37wc3zoIrdzrGuNai6FZbKRwrUtt40eDwgU2n/TANA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoTXFuZ2lUNkJPNVBrTStJ + c3VrejNRNi9TakVlWmRUcUhVMkRscGN2VVdVCi81S2tBREQ4L200SFAxdnZBRnFR + NzNQL245ZllsYUtoWkVwbVFCckRRZlEKLS0tIHpkcjVEN2NRQ2VvdkhUbWRwVUlv + bHcrSDBvK01BbFUwT1RRTTErY1hQRzQKqum3p9/H+a67he45llQuhq5dKbt4D9J5 + 6MBgAJzFsDlKtvcc5lfHFZ06NqDacNcgJYXTDGdnK4zd2YxKfr5/lg== -----END AGE ENCRYPTED FILE----- - recipient: age1z5wtjmk0jw0j9qz9k5rrnp30nzqxrl3v6wgl7eryvqus28zekp4qpx9jc2 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3YmJiQ2RvQ2pKN0xQbHdQ - bDM3SWFPM0pUQXB4eW1tbEJEbWdSWjVTeXg0CjE3cVNEM2Y1UHBLbStrRnpsQUM4 - cUh6aWROY0wzYnljdTJRZUtKODVBU2MKLS0tIGFybkhLUFF2ajdiZlQySENRc1lu - OXlPbmxsbDJQSlloSmtQb2ZQMDduUEUKnwnwWe3/oovkPlyZtUpoJVWAiW0rPFl+ - PHbo0vrkCkvkKjtXSBP9RPE0sgdPHaYDez9Ea7Q3qdKyYsCKTebapg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0b2h0OVJLNTBhTnpGMGxW + eElreDNlb2x1Z0RaZy9WWmc5MDFZRmFOZnlVCm92YlVWVWRZRHNNNlc2cGt1MkRG + L0NHTmVMVy95ZlJTSTkyNnZuTlVqdFkKLS0tIGsreTBmKy9YS1o0d0M3QjUxM1dv + bTJyblJScnpZem54eUh5djJVMjBvMmsK6HIFVAsaoO3Z6AotEeToGjKCowUpuV7a + kAU2q9CafM4GVCB20kI1ghSnMs8qNQTjQTKKQu3GUCGR2/CzL59l6w== + -----END AGE ENCRYPTED FILE----- + - recipient: age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrS1NBeFEzdythVGRmNmJh + cGpMbW1zbmJpeEFmR1lOM1ZsK3NXNFJ4YndnCi95NmFRS25ER0tsZGhUMjJZNUhi + TmxBQ1ZDK00yMmxTekhEZ3UwVGwydUEKLS0tIHUwSWtCay8rcEdmY1dZSTlIdUlB + dUhwZTBROUE4S0IwQzhVRXNNVXJUOGMKqq10yx9dChRzGp6zYoLiwZRsFLGK4tkc + 8qstPn4osC3vYkBwIAwbW4rbcW4bBUqje2mIcdXLQPSMqIyqsOA/zw== -----END AGE ENCRYPTED FILE----- lastmodified: "2024-11-04T20:00:35Z" mac: ENC[AES256_GCM,data:8gPH1/iWNTkUcCcW5A/+QBSHIOphnCFz7PDc7muwOfgdS7CRfpUrMbsT7smZzsC5TXuy6n/tzYajNqOkuJNzAXeHTAulD5wD/HqwLrFjhO+2zo4m35l8eN9q+AYjTvMXCvK3Yo929gAJa65PXnMmx1kjjSC061KjPrF/Ka0o87w=,iv:Mtn8rx6Lwm9nXh+9km4JyWUr6xFkr+wk2w04QTLdLac=,tag:fL1mFqS9d/HOvZZfPP625A==,type:str] diff --git a/openproject/secret.yaml b/openproject/secret.yaml index bc55e3e..038aef8 100644 --- a/openproject/secret.yaml +++ b/openproject/secret.yaml @@ -21,20 +21,29 @@ sops: - recipient: age14uxgmvw26e7f82gkvxl0zwnfc5l75rdn5sms4zj0xrtrnlgn4qlsqh3kkt enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByT0xDY1ZMNUtydlZqNyt4 - RGZhYTJCaTdoaUNDcUU3c2djUFFrb1NPWmdBClM4ZXZ6aUU0WU1NdmFLYWlHUVBy - VlU0VlZnRnQwenJPdGRSTFBac1ZlSTgKLS0tIGowNGZBZjgyMGxJbTZvOWRLS2Jr - ZTczeDVvYytjK0dzUDY0QXdaUlVyN3cKM+tC9agxFrnjpfPXoNXxCinTNXJ2gHyO - xmkLs958EAJZ8LuFfne01Sak/7ojRny+PzKb9TudIggCUoxAW8S0+w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOOU1YQy9wbWhFQUFhdG9s + Unc1NkVPRXhQc1J2djlDdjFHc1lKaHgzRUg0CitSS1dtMzV2Kzdla3IzTGN4d1cw + UzBBOHNjVGF2QkpoU3gvd0JIbXFzMlEKLS0tIDVvTEppNzJZRThkVHBPRDV6MUk5 + VFRhenhzR1NEZ2thTmc1SzdDQW1kM1kK6S5tN/eoVV7Lkvj3pqJ+eHYtqf8S6C9D + 1WXX6SnEq8R0dtj2HLnFaMUaO+ePumlOVAeQI14Mw+mHio0jRxnO0A== -----END AGE ENCRYPTED FILE----- - recipient: age1z5wtjmk0jw0j9qz9k5rrnp30nzqxrl3v6wgl7eryvqus28zekp4qpx9jc2 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxU2dyTnc3eCtSNFVBeFQ3 - bTFndGdUYXVTdnpnRTJVQjI3Z0RRZ0FkQzJ3CjZ6ZHBpU2w1MDRFUzJQL1FKS1Ex - N011MUcyY0hlV0lYREo3Tmhhc1NXZG8KLS0tIGZpa3IyU244OXRGZ1hQdVlJbzZr - cEk2ZEp3UzArK1NEL0E2Zkwzd1dnMW8KWWQ861ukoDUh7l1iFBnnrsInQWfeYgD9 - d1y8yHr1kLZX66xg9erbaQbA+xtRRD+5sctypxJWPNkDO+rW+pfrAQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSNHZ6akJ5V05MaHhiWm1X + K1hCSEpIaVNMTDBVMjU0dStXVTBEQ0JQTjBFCjUxVWtOcUdxRjZxa0p0dTBzSStI + S2x3dkJEUVl2YjAzSGJhMm9mTE5Ra0kKLS0tIHZoSFpOQlp0Y3YyVFN2TDBzbzJp + YWIxLzh3TUFtTTFzU2hsQVVoRm9aNHMKlg2iNn2ulXFV3pWEMYDtmIb5rNbjhzgX + 2BfV2dqIuDqRF11zHi2AcwLSE5Z8VpUNnmU/DDBmlOkqHyBNy27vPA== + -----END AGE ENCRYPTED FILE----- + - recipient: age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXNzRrV1ZCT2c0MFF4OWJ3 + amJDaVBkYVhxamlHSmJqUmppR0VYS3JIaGc0CnNmWWU4SXgvSVhtTm16MzkveTNB + Z1JpN282RDcrMFBTQmJXM3dXZ0RhSk0KLS0tIGFVZ0RLU3Flai8zVmVCVzR4Q1l1 + WnArT2ZnVzNSOXcxMlpINkZnTVRHRGMKnipw+4xmmx+et2+0Z2/rrmzcZnrEuZe4 + oqmymovrhdaZDp2I8e0jhznId0ZZH9Iq1aJJyKuVAIUzdwb/lrun0Q== -----END AGE ENCRYPTED FILE----- lastmodified: "2024-11-06T20:53:34Z" mac: ENC[AES256_GCM,data:3LaUkQy4IViYIjKHOJ71pIcPipv3p44ENAd31270uGsZNmOAlGqPcylF7Dlc475UfKrHXAZaagGKF80VkTaE6xca+Uq9ihUg0U5ovLyVbxBXMEjmycCBJXaKry17kju3eQec5dinqEBQ7+uU39lSKdhGPPvbZDYxu3WeZBWzrSQ=,iv:VN+W6S8t9RW06DnSoo+AY630bo4PVF027qtanv2YRh8=,tag:urMNwqclobcL7bxCJY5NbA==,type:str] diff --git a/surveybot/secret.yaml b/surveybot/secret.yaml index 092d9f5..336b522 100644 --- a/surveybot/secret.yaml +++ b/surveybot/secret.yaml @@ -15,20 +15,29 @@ sops: - recipient: age14uxgmvw26e7f82gkvxl0zwnfc5l75rdn5sms4zj0xrtrnlgn4qlsqh3kkt enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrd1ZReHRHazZzN1VKZVFK - eXo1OVhhL1hjeW5WMG5GNzUyWmFMUXFoa0dvCnhvaDNSNFRnMUJVMkxGRlVtRTR4 - WERLanJPbEs0ZTlGSEhudTQ0ckFDbG8KLS0tIDlQTDc2NGxDelMvZXk4WHJ2cTZS - dzkycGRVTW1FRDAwYk5OSFhoSkVPVG8Kvuhx+kEUCLwVlTxVWq2HXzszM4nJE09r - 4nOrW4ytSsC6BM4DR1WR/hbqY+cz/xaHEbCfQBaH4NYQUuaONLICxg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArcWErc2ZWMzdOSDY1L2ZZ + WXo0V3VPL2srZlpNckJQdFBOWnNmMkZiODJjCjR5VG5iOHA2UHVqUjFhMlZwbVBS + a3dYY3E5RVlvbGI3TFo2Q0RycEp5eFEKLS0tIFp2Qy9HTlk5U2plZUI1b0pzanpt + VlY2NlpYTG4yNlV3ZlNST3ViWWJXR1UKMc+fBij4aj16q7+1UDRJEBlLaW+ROr3K + 4ZsIMKPXkTiBc8S9lRzv8bmtT0a89wQGPp5ax8LawIXi8djDIxbAYA== -----END AGE ENCRYPTED FILE----- - recipient: age1z5wtjmk0jw0j9qz9k5rrnp30nzqxrl3v6wgl7eryvqus28zekp4qpx9jc2 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCN3pEOFZCSm90eDFBOEhS - T3RSVWh1ZVI1WS9pZTRkbnJMR0E0S04wdUhVCitFdk5hWjhWNGNqenp3c0dCZGNk - S2NrSk1Ocmx5WDkzeFRFMk5id3VheGMKLS0tIDU3a2Rvb2VKUHEwWVJFY2k4UHNl - dGdSTmkrRmVNWlovVC9JbTRROFgvbUEKEDg6EIYvD2xbVwMxWirkDA9lLOPt64zb - dhgGwbvL8ijAKVPKXLJ73IOWrwk5dCLv7oe8RDhkNDtuSus9HOqD9Q== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrS3BQTUxNY1hTd25VUDY2 + TzlUdDZDSkI5b2FYOXdBZm1pbHIyTnNKS1V3CnFHK0hzN0FRQlJXRmdRdWJ1QTMx + eDlzNFhDMnNaMWxaM2VPWnNlc09TU2cKLS0tIDRIZU14MFNDOXRRWlNuVWJmL0o0 + WTdTNmpKaGxWVWFBY2tZTDVEUjRsMmsKbr0f7nyIJO9RO6eNN6A6O8qlkJhchrc+ + tfDYhV2TmOmbJhQQ/N4IVfW2ob/On7C1xCDpUnNnMM8ZNtOBSYY48A== + -----END AGE ENCRYPTED FILE----- + - recipient: age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzSStFbzdrOTNKQlIxUGxo + N3lRVlkrbGZySDBvdEpVVXVWTFRmYlRpQkh3Ckt3dkdacXpsOWpKczlMVEhMNklP + aUovU0tSbDl2VnpTYkRlNDA3ZzZKRncKLS0tIDZKRll2S2ZJM1dxdExjYk9ZK2pB + ZkVXNEMzWWM4SzZycFZTWVNvWmdiVWMKumbG9j0BFs1Z6OksZjas3ZRUVmNMA6AH + dZPN0cRzWqAWAoVh8B/LBdKQorJtaSMajW73LqtJSzh4uoh5V+YjHg== -----END AGE ENCRYPTED FILE----- lastmodified: "2024-11-04T20:00:41Z" mac: ENC[AES256_GCM,data:dIghUTmsUH2deQGDv9Jykicf+kV4A2XYHqxOHq0TcR7G5V329U25tm4ID07kQKmJjSgPwTx/6Vadxu/Bo3ADrvMj5+bOCUENP5FcJEp8htkJHNlzn1syQ9VXu+Vbka0e0PpPJ4AlxM3toPdmRX4k7tP5FzVlMkxSwAjMsVivHYo=,iv:1094lyciqTvwdmJjCI761sRi42AXxyiFyPw2CSUqfA4=,tag:0LlLhMOn7l4NrFzmbcfPcQ==,type:str] From fa0d15ea34c51c37b65f7992c74242430f87b1cb Mon Sep 17 00:00:00 2001 From: Aaron Riedel Date: Thu, 13 Feb 2025 20:15:43 +0100 Subject: [PATCH 22/40] A --- .sops.yaml | 8 ++++---- app-files/apps.yaml | 14 +++++++------- drone/secret.yaml | 1 - hoylogo/overlays/prod/kustomization.yaml | 2 +- hoylogo/overlays/staging/kustomization.yaml | 2 +- openproject/db.yaml | 1 - openproject/secret.yaml | 1 - surveybot/secret.yaml | 1 - surveybot/surveybot.yaml | 1 - 9 files changed, 13 insertions(+), 18 deletions(-) diff --git a/.sops.yaml b/.sops.yaml index 964334c..ad0b75f 100644 --- a/.sops.yaml +++ b/.sops.yaml @@ -1,13 +1,13 @@ --- keys: - - &argo age14uxgmvw26e7f82gkvxl0zwnfc5l75rdn5sms4zj0xrtrnlgn4qlsqh3kkt + - &argo-aaron age14uxgmvw26e7f82gkvxl0zwnfc5l75rdn5sms4zj0xrtrnlgn4qlsqh3kkt - &aaron age1z5wtjmk0jw0j9qz9k5rrnp30nzqxrl3v6wgl7eryvqus28zekp4qpx9jc2 - - &argo-yolokube age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz + - &argo age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz creation_rules: - path_regex: .* encrypted_regex: ^(data|stringData)$ key_groups: - age: - - *argo + - *argo-aaron - *aaron - - *argo-yolokube + - *argo diff --git a/app-files/apps.yaml b/app-files/apps.yaml index fd12971..22d1836 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -66,7 +66,7 @@ spec: - drone-secrets rbac: buildNamespaces: - - drone + - aaron-drone env: DRONE_RPC_HOST: drone.ar21.de DRONE_RPC_PROTO: https @@ -76,7 +76,7 @@ spec: path: drone destination: server: https://kubernetes.default.svc - namespace: drone + namespace: aaron-drone syncPolicy: syncOptions: - CreateNamespace=true @@ -96,7 +96,7 @@ spec: path: hoylogo/overlays/prod destination: server: https://kubernetes.default.svc - namespace: hoylogo + namespace: aaron-hoylogo syncPolicy: syncOptions: - CreateNamespace=true @@ -116,7 +116,7 @@ spec: path: hoylogo/overlays/staging destination: server: https://kubernetes.default.svc - namespace: hoylogo-staging + namespace: aaron-hoylogo-staging syncPolicy: syncOptions: - CreateNamespace=true @@ -136,7 +136,7 @@ spec: path: surveybot destination: server: https://kubernetes.default.svc - namespace: surveybot + namespace: aaron-surveybot syncPolicy: syncOptions: - CreateNamespace=true @@ -158,7 +158,7 @@ spec: releaseName: cloudnative-pg destination: server: https://kubernetes.default.svc - namespace: cnpg + namespace: aaron-cnpg syncPolicy: syncOptions: - CreateNamespace=true @@ -188,7 +188,7 @@ spec: path: openproject destination: server: https://kubernetes.default.svc - namespace: openproject + namespace: aaron-openproject syncPolicy: syncOptions: - CreateNamespace=true diff --git a/drone/secret.yaml b/drone/secret.yaml index 817abd8..69bfec7 100644 --- a/drone/secret.yaml +++ b/drone/secret.yaml @@ -2,7 +2,6 @@ apiVersion: v1 kind: Secret metadata: name: drone-secrets - namespace: drone type: Opaque data: DRONE_RPC_SECRET: ENC[AES256_GCM,data:9wEps0DmvV8Qqx2dARB6M1stwAdf547n5rbVBEiaa4lL5GPAbHMgOI7bYIo=,iv:3SAA0PNJT1ajUx1SJWNpX2AiJnmcFf8tJCrvOW3fJqk=,tag:Z3yuE/jfyAldVjrdIcPlFg==,type:str] diff --git a/hoylogo/overlays/prod/kustomization.yaml b/hoylogo/overlays/prod/kustomization.yaml index b90fc70..dc2e319 100644 --- a/hoylogo/overlays/prod/kustomization.yaml +++ b/hoylogo/overlays/prod/kustomization.yaml @@ -6,7 +6,7 @@ images: - name: git.ar21.de/aaron/hoylogo newName: git.ar21.de/aaron/hoylogo newTag: "4" -namespace: hoylogo +namespace: aaron-hoylogo patches: - patch: |- - op: replace diff --git a/hoylogo/overlays/staging/kustomization.yaml b/hoylogo/overlays/staging/kustomization.yaml index 6934a6d..272b235 100644 --- a/hoylogo/overlays/staging/kustomization.yaml +++ b/hoylogo/overlays/staging/kustomization.yaml @@ -6,7 +6,7 @@ images: - name: git.ar21.de/aaron/hoylogo newName: git.ar21.de/aaron/hoylogo newTag: staging-1 -namespace: hoylogo-staging +namespace: aaron-hoylogo-staging patches: - patch: |- - op: replace diff --git a/openproject/db.yaml b/openproject/db.yaml index 42a7d89..a8c2fa0 100644 --- a/openproject/db.yaml +++ b/openproject/db.yaml @@ -2,7 +2,6 @@ apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: openproject - namespace: openproject spec: instances: 3 storage: diff --git a/openproject/secret.yaml b/openproject/secret.yaml index 038aef8..f08b681 100644 --- a/openproject/secret.yaml +++ b/openproject/secret.yaml @@ -2,7 +2,6 @@ apiVersion: v1 kind: Secret metadata: name: openproject-secret - namespace: openproject labels: app.kubernetes.io/name: openproject-secret app.kubernetes.io/part-of: openproject diff --git a/surveybot/secret.yaml b/surveybot/secret.yaml index 336b522..6634dc3 100644 --- a/surveybot/secret.yaml +++ b/surveybot/secret.yaml @@ -2,7 +2,6 @@ apiVersion: v1 kind: Secret metadata: name: surveybot-token - namespace: surveybot type: Opaque data: TOKEN: ENC[AES256_GCM,data:HZpvxzlqgtHIXstqo+wH5h1SVfBBS7aV7fPEIGO3gq0Hu8wbqMDq8nzBnGHQik+5jR0AoYQvRKLqD+VyIPgHQX8Nc/15er+pyCxa2kLXXPg=,iv:3dcWIVEU7HzkBCA8IT6lHPzsywmW3nCM0HK3Wr8r5eA=,tag:QplCTrlD08dpZvZjBdvlbQ==,type:str] diff --git a/surveybot/surveybot.yaml b/surveybot/surveybot.yaml index 1fcfa9d..9378868 100644 --- a/surveybot/surveybot.yaml +++ b/surveybot/surveybot.yaml @@ -7,7 +7,6 @@ apiVersion: batch/v1 kind: CronJob metadata: name: surveybot - namespace: surveybot spec: schedule: "00 16 * * 5" successfulJobsHistoryLimit: 1 From 60e80f1a5f5a4d6ecf902642b941e3f54427c9f4 Mon Sep 17 00:00:00 2001 From: Aaron Riedel Date: Thu, 13 Feb 2025 21:19:43 +0100 Subject: [PATCH 23/40] fix sops --- argocd/secret.yaml | 38 +++++++++++++++++------------------ argocd/sops-secret.yaml | 38 +++++++++++++++++------------------ drone/secret.yaml | 38 +++++++++++++++++------------------ openproject/secret.yaml | 44 ++++++++++++++++++++--------------------- surveybot/secret.yaml | 38 +++++++++++++++++------------------ 5 files changed, 98 insertions(+), 98 deletions(-) diff --git a/argocd/secret.yaml b/argocd/secret.yaml index ceff9d7..d2fb7c6 100644 --- a/argocd/secret.yaml +++ b/argocd/secret.yaml @@ -7,7 +7,7 @@ metadata: app.kubernetes.io/name: argocd-secret app.kubernetes.io/part-of: argocd stringData: - oidc.aaronid.clientSecret: ENC[AES256_GCM,data:ZrhSXPm+p9iD5tvJA3hyqiGw2czrO3YLbWPe7WvQf2Rok28f3V0a2DkFR336+5x4YTF6Khw1qYtQH6Kgc1HS7RbY7RDpynAwO2JHrxApfUir31UZ2oNsbTqv7nyNSrMFR4vgLEx9WSTaM66c43sgevdaCodDbzfiSe+Zjwrdcfw=,iv:Bzf8U16ZlkflMFM6BlfBbiJfaM6YzxkUXPTXnfjbApU=,tag:7T5e75XFm//aoTLTtQR3mA==,type:str] + oidc.aaronid.clientSecret: ENC[AES256_GCM,data:3Gy2J1vkqD4gpuEx9LmFDf95OnC7X3g4zYKEvKUL9JaNiK6uJapDX6a37nv3ORnnqhCgcrEdEhybNgJcNgK8vNO033QO92KbIF4rYCkxyulyGHcv4h43qvnDgoR+ac8Wr7fPlUUhltLMXnIXU3XJN8mMNlaNeuMSHgj0wCrAxnc=,iv:gWIkcidScnnQHIK2uWgj8oqexj/VV32/Frki3M+mzok=,tag:fAIgWIt3WQKAOsavEkwDGw==,type:str] type: Opaque sops: kms: [] @@ -18,32 +18,32 @@ sops: - recipient: age14uxgmvw26e7f82gkvxl0zwnfc5l75rdn5sms4zj0xrtrnlgn4qlsqh3kkt enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAySmFSTW5lQ0F2RDE5S2JT - Y0s2OTNxdDdzZUNOaDYzRnFZa2lHZ05ZQ1c0Ckp0R0hXbXE0QjUxYjhsL29ibHRz - dTlwcEtZZ212U0YwZ2cwQU1xOEhZR2MKLS0tIFlSZWV2U0xBMS9yWFV1cHpBbzd6 - bjduYmpOV3l1L3NvQmtjQWtrR2UrMWMKZg1MuawTn3qCPPxCvg8qojSC9yMn0h7o - B0Ca87bLIZmlRKA+FUEnjsO7i1HT9/WdX56h86DT49EvP12eW2hfNA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBudHU0M0lkWkhtK3VoMW11 + MElWeGNQbHV4VkZJdjVtZjVES0habHNSNlNnCk9CenFSczRzNnh3VE1sY0RORWlK + cDVhNlpCVmRqd1A3SFFRak5rZ1diQ1UKLS0tIEpJTUI3aHdCa1c1TEs4VHAwNk5s + ZjJ3SWhLOEFiTFBLUzJ5dnlIWDJockEKyDE0oWagwADB5HpdiafTu+BD10SbIacv + PchR/y5EOfFShzQ+7AEal2c78ztJO4D2Hd900RIpkoMkmHOyzq2bAA== -----END AGE ENCRYPTED FILE----- - recipient: age1z5wtjmk0jw0j9qz9k5rrnp30nzqxrl3v6wgl7eryvqus28zekp4qpx9jc2 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBNMmhHakx0dVNMakxESVY1 - U0ZZTnUyL2xOY3N6UW9sUFRyVEtXV2pET0JFCm5aR1k3aUxqaTFuZHpDeC9vMkUr - VHVSeVhScVdOaUlFYzVWaXUxVVZkQmMKLS0tIE1hVnJTa3FaTS84amNRMHVoZC9Y - Z0pGdzBocDlNNjlFY3FmN2NtM2ZaZUkKKaqAS0IOEJdt7kjS92cC4hZg7cs5jXOl - /xBDHewkugMXGA/mUhqLPYvUKer/Z3tIzwMgM4LSCxS/akvo295NrQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAwUngvcHBmekpsSGxac2d4 + NmtPZ1p1aldacXVoZGFQNUZJZTZsL1NEVkNZCkRyMmtxelcrQ3FTRGk5OWltQWxp + VndydWNXWTc0d3c5MlVDeEIyUVRLUm8KLS0tIDZFcSs2MVJHQ1NmWXp2L2hkRTFE + RFdxZlBNekpkY1paeEVnTjk2SVk3S2sK+gftlDHXbLhHfDt+TiNlcz8xTgkhpiuX + 8FPvMfpK0/JPjnNG2ueofYhLmiPW/2h8GAMa3yjc/mdp+jnXkHuRdQ== -----END AGE ENCRYPTED FILE----- - recipient: age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrQVplZFdkNzExb1p0dGNS - Rlc3SUVuejBZanJSTmRzTUFNUk5oVjZKSUdvCjFiMS9EU1ZqdE9iWTBlUHVPTWxJ - TmxJYTZjTWFWSVBVZzlWTzk5S2o0YW8KLS0tIFo3N2hvbndLN1dUOVJMTHJtRVFn - OVlCeG5mYVhWeUt2Q3NNNVNXL21uQXMKpUQ/sMaQMB9Pe7ZKxLuSYdCf2k7vDjF8 - 31hw6aYbMtPLYLXsOtJbU+DXlLenoljfD04xdT9PcTaHKrVU+3ayag== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHMGZPQVBrV3ZWWm9oME11 + NFgvTkh2REpBNldFamJCVWF4UW9qcEtMeUJVCm1mUGJKdXAxRlZPd0YzL1hvQVVK + SVBDcU5mS1VGZmxhTlJPM0xra2l6NXMKLS0tIE5KLzlXREF1Z3crekdNeTZJWWEv + L1dPa3VILytUa2xuVnVKdldoMllxRGsKi1QnyfIeFMxaFYf12akgUi73NyLxME7S + 7u5ORruhUILOZTvpX7tzwdn5aUajtxeBsaPdlJdzY4mRsa1NMIOx5g== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-04T19:32:15Z" - mac: ENC[AES256_GCM,data:pzukaPYOzoo3vsXpwMiIpXCuOGy2MlWAsAuPvjsDimKb5kvYeZiVKhiT2BID6TtEcGL0FpX6pyrwl6c+lwK+5fcsKRGWPLowZ47RAQxnctieRH+QneMTnmIHI6Ex0PmDPasnG1EMoXyitGDNO7ouEk1ie0AK9z9+xVeyXCtUCRg=,iv:CzUiJmvUBjpwVmf0QW1X7b1CsQlSMX2fwnBHoqlRbo0=,tag:5yxJZOzuQ720YEQAbaHY8A==,type:str] + lastmodified: "2025-02-13T20:19:15Z" + mac: ENC[AES256_GCM,data:S34dLDOUeKFdUX08bpZ8kfrR8AmUpJPElBuQz7Mo8OmYZAWJkMJa+7Wi2v8rY3iEl5Y0n2hWpuvUVFfuBlYQeiLzsaPpJ4WTZkMXctohs+QPronFCeDbNUwdRG82gPvsSxoybVlVzF3N43Aov7Wr7Eff897o/5Blky5eLmGb2bA=,iv:d8YQN11RaSrDvLD08Bw2130HaDxrpA+wIOu03x+MRqA=,tag:tY+9MSeNI/JfGOB6oHxTaQ==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ - version: 3.9.0 + version: 3.9.1 diff --git a/argocd/sops-secret.yaml b/argocd/sops-secret.yaml index 88785fd..9c71a0d 100644 --- a/argocd/sops-secret.yaml +++ b/argocd/sops-secret.yaml @@ -5,7 +5,7 @@ metadata: namespace: argocd type: Opaque data: - keys.txt: ENC[AES256_GCM,data:ywffPwk3i+622egcKEB3QmBdnRmcaYhtaF3niX9YzOAutQUuCAaKMjEZWbl5+S9/CVfUg+iVaBoUCSUsjzaFrf22upS45ayMnzS8F9JzvAz8L2IEecEhwDvbUtsupbpciOGYZlA+XPdRb6ab+VEnuTnrv7hIA0agdRdje/qlRZwJ8Vsfozq1xuvPFWKdtORcB6mA3pZaTMheOqEwPbosT+WD7Hn1m8rK1DG+pDQsRHb8TwBXK+YfyWnvScRa04jcvhPg8nyg3lZS6PjRLGKXZ5g0MytVDXJWzrGOfU3cUmt3XUM46Vl1t8gF/Y1P+jvFeNjK8tRdze1nUpee,iv:jUOFyM/KB4b3h9UZAyM64c6IDyL+Vw9kA6qDRRD7/uw=,tag:FF3F8R4cf/59ncGy4sbkHA==,type:str] + keys.txt: ENC[AES256_GCM,data:wYdwuaySM50djWshzIpbD/6GaNtQTJsqyB2naldo63EzHAUknZrQ/TpuUD8uXQWsxoaeAmEE76moj8lVEZ4tn2CuYreKYQOKWGWrMvggfx9hzeVz+vkUpZsStiFwQN5hvwNsHKcokY4Tlt6/F9+J3wDzTA8qtFgbmntf1T0NJE7MrcCm8ayzC0UHrZQTsSPa5x4NP0N+hHxSdizgA0arSRid50GFgj7aEeUNHPwMMayt1rd0rDGj8wrAEMn8/q0EJyjTK2MltSWjGJb8qyZ99kzG1k/44FwuP7MUB67n+J0cLoVreO4I7aJmQb1E+3bHxUSG7B5PRUIUwAlE,iv:io8SCnrwfzmQGrjD+oH1ZrI809bEgPlhOwBEzF4V7jI=,tag:pXCWvlszalTwDL9oKxOBcg==,type:str] sops: kms: [] gcp_kms: [] @@ -15,32 +15,32 @@ sops: - recipient: age14uxgmvw26e7f82gkvxl0zwnfc5l75rdn5sms4zj0xrtrnlgn4qlsqh3kkt enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzZlJpWjJuVDZTRHp2eEg4 - aE5jNnJzRXRSTVFkNG9tVFEyYUlobmNCYUc0CkE3bDVqRWhmL0liYlFIK2lObVc1 - QnVWNis5NG1rVU14cnBwOU0vZ2Q0R0kKLS0tIEdwYVZCTFB1alVCdVB1ZTl3YXVz - MmdWbHhxblN0WlRUeFdrSmdzdWVXNkkK3MATwPKE9ss/bbhuvBBFSSSSMn4KB7vZ - Z1hdYFrw8mdIUTYoH6ro9ny+no1pq7fvFyDbv4Pynf0kAHNJx4vIZg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvZXFwN015MnVIUXNncHo0 + cUNRYUxacHpQZXR6MlhyRTBIMmxLZzRiTlhrClUyeHgwbVR3TDVTTkxFMkNiZjFV + RlpqZVQwTTI2NXZ0V2Z3Wm8reXVxNjAKLS0tIGRtSndTK0NMZkNFUzZiM3BpQkFh + NmlOMEFaN1N6RzA2YmQ5dW1vc0pkaDAKNHam03rJ6NeWRVyesa0NB4NmCi8uKTvd + wamq0vOCtgsUEo/MnHwe2yTtdnEB8OdoHs6SjPErhpUAQQfbXZ+llw== -----END AGE ENCRYPTED FILE----- - recipient: age1z5wtjmk0jw0j9qz9k5rrnp30nzqxrl3v6wgl7eryvqus28zekp4qpx9jc2 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQbjNVTDhma1k5ekR1Rkh3 - OER0dG1EK2NFa2xDK2NienVOMFNuM29vcXk4Ck95UDJubUdkbGJMQWNOTi9sRUt5 - ZUhlMHVoR3FpcksrMmV5eThGUU9OVE0KLS0tIDdnWW5iWjJDamtBSzhONHlyTTRs - cG10UDNZdjV4VWlsR1ZHR3VFNEc3bzQKjkPqFICUxFxUog4r45A+QAQJFXt6tqtq - T/cjR28E1mJIHnjiIVl92PlnRRPOZ6C5h1laaJeAIQdKdrOnQiuueg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3OGc4ZG92eHZ5N1B5UUlV + aExPak4xT1dvTGlFd1NoM3gycDNGeEhONEhJCnVpek0vZTRXaWc3Q3ViV2pPb2tF + VFUweDNsUmxGK01BQlBlTlJwdStGaEUKLS0tIHc3cjFNb1Z5cGpFUHR0MXloT21V + ZDJnQVNwYnYzR3lmdm8zTnJuaWlmek0KG1FMz2q6WWW5ZYzS0U0Uj5KPnXfJZH7n + 8DeQ0+mCFX8fYQXKFL0u/NsnPVAlEb96nAsg90K7h0cXMmk7rMNLJg== -----END AGE ENCRYPTED FILE----- - recipient: age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkcTd0aU5JNVR0MXBNemxM - QUV2SG8wQWM1WU40S2ZBUW5xczhpN0lwMUg0CmJIVmpOUEVacE5DbE94RjEvU1oz - NEpDdll0OUZvcVVBQm1EVDkxUHM0cTAKLS0tIGZVNEVmWFlkMG9IMWxvcy81YTdS - eTA0bzV4VXYzOHRuUHJFSHQ0Q2tNclkKWMstuxBh2gVSnL5UfH3sDBfeO5BktAcQ - hgOO9oTnR2G90T8DVgx3AfroEe71rOXbhq8/OlyveDFRrxnF5SzQdg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEVWs0TnlOR280U2V0WnZY + QXBLbTZtZU5aOXFNK2VUT0dnOExHYit3bUhrCnJKQm9LSzJsTk9SMGNML0xVOUQr + d2RSQmtHYnpxcXg4UFVtY3krRXIzYTAKLS0tIHJVMkNpd3BEOW9GY0NpYnc4Q3RM + WDdJZk9BaFVLR0Vxb0d3RmZFUFBvZVkKfPZ2KcflJ2Dz+HrSCpzQ77lkN0WbavAC + vP0mNZpg95Vpeg17oSHwl6KysYf8c+iPOHPVzNFLT5/mFyDB4DfStA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-04T19:39:31Z" - mac: ENC[AES256_GCM,data:OEeKuRW4Wvkqd/aafrvhNQxCQmuose5b/PfzxGh5a0+cN5ORib819ksjpLu78AL2rOhc0qRff8hi8TgWpoyBP7BiihpmCxZGFabITTAbH8x0Nacn3fef30K4Yw8AB7gLXrN1fwA9PLxfFoqmzsPnMh7xpEKMEKq1T0/ijqvmGJM=,iv:BM5gC/Vi4COBSFC/BHxV+bv8WXDwF+6eEx64ROIqpd4=,tag:WxwbtnYxa2okLdWUxWI7Yw==,type:str] + lastmodified: "2025-02-13T20:19:15Z" + mac: ENC[AES256_GCM,data:PVQpcs86R6/AAkiEio0bbN0OSPS6Tmj8s0S7McjJ/KSGPnFxnA5WxDXlu2AdK/5Dqp1Q5QGn+sHjNMeW9/GnxGEkUdhI+am15IV3pUU+IK41QgTEh7FTmBMJaSgdZWeNFSJEQuTUC2jKORl+jeFssCjoT3h1b7u/oQMvTOidCjo=,iv:RgPjRpRFrBssoSts14Yrnf+kuyuVUhg+JNrLSsgRmpg=,tag:0EyIz8OJw86ELFYO6zB3lw==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ - version: 3.9.0 + version: 3.9.1 diff --git a/drone/secret.yaml b/drone/secret.yaml index 69bfec7..5aa2a4c 100644 --- a/drone/secret.yaml +++ b/drone/secret.yaml @@ -4,7 +4,7 @@ metadata: name: drone-secrets type: Opaque data: - DRONE_RPC_SECRET: ENC[AES256_GCM,data:9wEps0DmvV8Qqx2dARB6M1stwAdf547n5rbVBEiaa4lL5GPAbHMgOI7bYIo=,iv:3SAA0PNJT1ajUx1SJWNpX2AiJnmcFf8tJCrvOW3fJqk=,tag:Z3yuE/jfyAldVjrdIcPlFg==,type:str] + DRONE_RPC_SECRET: ENC[AES256_GCM,data:jrF3Y4c6HVYse2h8MhzPMTfLhD2VLmAGyr4yxjf0gFspTAVLcYwNtoJbjnI=,iv:7xGbWm5exOTDYJc3Uwj++9HWheyJI+F0SypeAmK7HcI=,tag:ksWv+zzc8fH9a193cNwYXA==,type:str] sops: kms: [] gcp_kms: [] @@ -14,32 +14,32 @@ sops: - recipient: age14uxgmvw26e7f82gkvxl0zwnfc5l75rdn5sms4zj0xrtrnlgn4qlsqh3kkt enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoTXFuZ2lUNkJPNVBrTStJ - c3VrejNRNi9TakVlWmRUcUhVMkRscGN2VVdVCi81S2tBREQ4L200SFAxdnZBRnFR - NzNQL245ZllsYUtoWkVwbVFCckRRZlEKLS0tIHpkcjVEN2NRQ2VvdkhUbWRwVUlv - bHcrSDBvK01BbFUwT1RRTTErY1hQRzQKqum3p9/H+a67he45llQuhq5dKbt4D9J5 - 6MBgAJzFsDlKtvcc5lfHFZ06NqDacNcgJYXTDGdnK4zd2YxKfr5/lg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4cWRBQzFHTzR0WUNhc0Rl + dWlaTE9BTUFBb250c1ZaVjRrVUY3MjBXcDNjCmgwMjRzcFlmc3NhRUhkdHJHa3BV + bis5VWNCY1JFZ0ZpcjhJUWcxZXluZ0kKLS0tIFk1NnhSMWxvZ0JuSTFTV1lwY1Na + UW1YSVplRWNZc0o2UjNDUG5CUncvbk0KR/UDgABlTT4wA7CcE31LkPOMk7sXM6jr + rccWRqlgEyvD3AgRPQNUEZ/3nJbORhFLDt8jxsT4POFsDtZvxH1f2g== -----END AGE ENCRYPTED FILE----- - recipient: age1z5wtjmk0jw0j9qz9k5rrnp30nzqxrl3v6wgl7eryvqus28zekp4qpx9jc2 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0b2h0OVJLNTBhTnpGMGxW - eElreDNlb2x1Z0RaZy9WWmc5MDFZRmFOZnlVCm92YlVWVWRZRHNNNlc2cGt1MkRG - L0NHTmVMVy95ZlJTSTkyNnZuTlVqdFkKLS0tIGsreTBmKy9YS1o0d0M3QjUxM1dv - bTJyblJScnpZem54eUh5djJVMjBvMmsK6HIFVAsaoO3Z6AotEeToGjKCowUpuV7a - kAU2q9CafM4GVCB20kI1ghSnMs8qNQTjQTKKQu3GUCGR2/CzL59l6w== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTYkljMUlGZmtnNTU4dnR2 + dXFyMkNUeFVHMENZa3d0a3MxNGpyYlhSS0VBClVXaXBVTU9GWkNjWk9OakNxakJK + a29VNzZ1UGFqNFhWclRONUw5dFo0WVUKLS0tIEQzS2ZxeldzZFY0cWlvRzIvVkl1 + MGJpczFOcThtTlVrSUROMytRNVVkc0kK0iO5dHZA/PhRGczCqFa1frXGMfJE30Cq + ZVfX5HcndP/87F5dv8FO2A9EJz4riz/TjuOpxIUhinDul7JI0T4KQw== -----END AGE ENCRYPTED FILE----- - recipient: age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrS1NBeFEzdythVGRmNmJh - cGpMbW1zbmJpeEFmR1lOM1ZsK3NXNFJ4YndnCi95NmFRS25ER0tsZGhUMjJZNUhi - TmxBQ1ZDK00yMmxTekhEZ3UwVGwydUEKLS0tIHUwSWtCay8rcEdmY1dZSTlIdUlB - dUhwZTBROUE4S0IwQzhVRXNNVXJUOGMKqq10yx9dChRzGp6zYoLiwZRsFLGK4tkc - 8qstPn4osC3vYkBwIAwbW4rbcW4bBUqje2mIcdXLQPSMqIyqsOA/zw== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBUXREYjJEUmVwZ1ZTTmZh + cnp4K3dYdmczQ3o5RWFzMlF3NTRrOHFaSzA4CnBFbXk2MXVpVUxudXBMRWJwQ0JW + S2M3UEp1Qys3L0J1KzNsV1R3d05zamcKLS0tIDhMaDFmeG1vZWkzWDBKWGVoNWJS + REFDWXpDUkVkSnkzSmNiMzd6a2ZsbUEKFoDTBpjI/VCPCeqE+hVNk0zswNEWbnNw + TTwVfQ1xOXD5FeH8B+9zHo14UTi/Cp9T4OIcYNduKar7K0rQLlgz6A== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-04T20:00:35Z" - mac: ENC[AES256_GCM,data:8gPH1/iWNTkUcCcW5A/+QBSHIOphnCFz7PDc7muwOfgdS7CRfpUrMbsT7smZzsC5TXuy6n/tzYajNqOkuJNzAXeHTAulD5wD/HqwLrFjhO+2zo4m35l8eN9q+AYjTvMXCvK3Yo929gAJa65PXnMmx1kjjSC061KjPrF/Ka0o87w=,iv:Mtn8rx6Lwm9nXh+9km4JyWUr6xFkr+wk2w04QTLdLac=,tag:fL1mFqS9d/HOvZZfPP625A==,type:str] + lastmodified: "2025-02-13T20:19:15Z" + mac: ENC[AES256_GCM,data:kCdPeuBOut4sXFYcp5uStaERQL8steUy1MZ51hWlP7sDfHpoKIV2oEEbRDlVy/2+no58WfH161J8gy5dw+B+ambwkcBShUA3D8yR8akX3ZlCSPR+Xp/KsUrtM5CtBmWpCiaI+0RZUnEXcRRWYPzHA4g2Hmrlg5mMmcD63zmV100=,iv:nXWlCN+DNLovf26fyCMDc0GmVtCaKB18pZUVpbqfjzw=,tag:QNT0A0SN8Vt992WAukNpmA==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ - version: 3.9.0 + version: 3.9.1 diff --git a/openproject/secret.yaml b/openproject/secret.yaml index f08b681..4c3356d 100644 --- a/openproject/secret.yaml +++ b/openproject/secret.yaml @@ -6,10 +6,10 @@ metadata: app.kubernetes.io/name: openproject-secret app.kubernetes.io/part-of: openproject stringData: - OPENPROJECT_OPENID__CONNECT_AUTHENTIK_IDENTIFIER: ENC[AES256_GCM,data:YRSk6WbIi03tMl5PE+jVeWUjiEsMogGSjcd71DWmdhrs9hx0gHz/6Q==,iv:9a5cATFe+sGFVvIcIq702XZpWbwCpkEgbHL04WC73RU=,tag:t/TAeA5lkVS4V5EWZjP96w==,type:str] - OPENPROJECT_OPENID__CONNECT_AUTHENTIK_SECRET: ENC[AES256_GCM,data:iP1vQTVCS9iB5qBvsT4HCpXg/7vEaqEvMBG8pkjapx7fwdzUvPnumqT/4kjT2A0G0B8hvbNbLXlBx3u3bznUjFCyQXizDmsP7y5IewtQD9x1Gjcc/3PyijUauXTIYt3DjjhJqStiDsc855LGbdBukowdQNZwTdHGYkEmZmlyNnw=,iv:msO6nSphjMFwnRZ+bzyPJDOMfAVMpYzf6bXq6m5OYJU=,tag:zxYWhn3zXHKdGNwyAoOq6g==,type:str] - OPENPROJECT_FOG_CREDENTIALS_AWS__ACCESS__KEY__ID: ENC[AES256_GCM,data:d4kh/eBE35VT5dE3oIAQiIIaC54=,iv:0/Tvwi5zWHetytYPWsSTEcVX8cc7MjwQQpgD2j/2blg=,tag:WTuGgku1aQYcChf1dTShBw==,type:str] - OPENPROJECT_FOG_CREDENTIALS_AWS__SECRET__ACCESS__KEY: ENC[AES256_GCM,data:MrOc+zr6qkv+55vjuCciijW1bnjKyjxr0mbbH/IajNjMvDIVqq7GDg==,iv:0+GBZuWA6t5Pp5gKeIczrFKdTYMznV2fTSuJxS/y6Do=,tag:zq9QtqFANlUFJL737Sa8jw==,type:str] + OPENPROJECT_OPENID__CONNECT_AUTHENTIK_IDENTIFIER: ENC[AES256_GCM,data:u0EqZSaIBVEavmNVevNcO1ZtlMHZfdXDi4s0Rfjo9NyeIIsN3rHWuQ==,iv:mvhGi5w/kCOQGcTaQz8FOeGBvaP0NSH4DRzFhA5IwQg=,tag:P9CYCymCpWPZ0+0Ujc0rrQ==,type:str] + OPENPROJECT_OPENID__CONNECT_AUTHENTIK_SECRET: ENC[AES256_GCM,data:z17lplltjJd+LnmceX9Hdak6BHVaZ1nSHWt4FMiSbCtl02igdA5i3jozUyagwy4y+B5TMrla+BmK5KMFoZsalpThJZjWFcOZyo8BtQOeAEODXnwNg6Sznmhvya4BTEzdzkqbeOIYp/38rkcSUeTDPwo1ca+M9tb2udfvTmIg6FA=,iv:XEOCc5uUu4s5DQTnClCv1W89x4T+TS4zQS/G6V9UedI=,tag:GjY97MANIMAKEOgelbeprQ==,type:str] + OPENPROJECT_FOG_CREDENTIALS_AWS__ACCESS__KEY__ID: ENC[AES256_GCM,data:0vVJDBN9yl+K+LAAfvtMMQPX2YM=,iv:7PXtPZsYlOffhJMu4l6MRgBKkC8sI4R+6DFWIGK3rJ8=,tag:4XEdO10j8VXMCDst86KYFw==,type:str] + OPENPROJECT_FOG_CREDENTIALS_AWS__SECRET__ACCESS__KEY: ENC[AES256_GCM,data:OAZ1embfVUQBorMd69mBaGy0fAI4TEjuwDzCyriWQwtlSr/xsi1ypQ==,iv:eOu/LwYxsoCKbx61gmioLm8Zn1rfIVd2Qsil03r6Kro=,tag:/hRprgV+c9Qpwsbpkdj1xg==,type:str] type: Opaque sops: kms: [] @@ -20,32 +20,32 @@ sops: - recipient: age14uxgmvw26e7f82gkvxl0zwnfc5l75rdn5sms4zj0xrtrnlgn4qlsqh3kkt enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOOU1YQy9wbWhFQUFhdG9s - Unc1NkVPRXhQc1J2djlDdjFHc1lKaHgzRUg0CitSS1dtMzV2Kzdla3IzTGN4d1cw - UzBBOHNjVGF2QkpoU3gvd0JIbXFzMlEKLS0tIDVvTEppNzJZRThkVHBPRDV6MUk5 - VFRhenhzR1NEZ2thTmc1SzdDQW1kM1kK6S5tN/eoVV7Lkvj3pqJ+eHYtqf8S6C9D - 1WXX6SnEq8R0dtj2HLnFaMUaO+ePumlOVAeQI14Mw+mHio0jRxnO0A== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB6U3ZOaHd3Q21ZbVZudjZp + Y1BKMUdhU2ZQU1M2ZVlpNnVLMlRhNnZyTlJvCnI2TWZGR04yTWhUTllwUDI4aVlF + d24veFJwSmV0Y2NjL3l5ZW44a0F0d2cKLS0tIDdTMndsTk53Y3Q5WEpiQUFCRHZt + QXY5NTYyNldCSnFaQmE1QklTUURETDQKNlWFVA6qHmKDazv48PVygwV4/4cgBtKK + IYPcP2N0/T0rDw2ngw4lNdHJ90doTTmlUjiPYDmmfopGOi1XpoG2dQ== -----END AGE ENCRYPTED FILE----- - recipient: age1z5wtjmk0jw0j9qz9k5rrnp30nzqxrl3v6wgl7eryvqus28zekp4qpx9jc2 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBSNHZ6akJ5V05MaHhiWm1X - K1hCSEpIaVNMTDBVMjU0dStXVTBEQ0JQTjBFCjUxVWtOcUdxRjZxa0p0dTBzSStI - S2x3dkJEUVl2YjAzSGJhMm9mTE5Ra0kKLS0tIHZoSFpOQlp0Y3YyVFN2TDBzbzJp - YWIxLzh3TUFtTTFzU2hsQVVoRm9aNHMKlg2iNn2ulXFV3pWEMYDtmIb5rNbjhzgX - 2BfV2dqIuDqRF11zHi2AcwLSE5Z8VpUNnmU/DDBmlOkqHyBNy27vPA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlbDlvVldrL2lCMzhsMjg4 + aHo5aExVWVBDTGl0RGtqUEZQS1JyWGRvZFFnCkNyMzc2WS9aS1doa1Y2R09JM0NJ + eWZRbEtNdTN1YWE4N3hqVDRRekZ0cDQKLS0tIE5oT1FCQlY2TDRlM3JSM2p4ckM4 + bHBpKzUvVi9YbHNNcjZEanVOeXB4SDQKFAV1upJgJzRlXzEB9FEW2sSeebC8dGt8 + xdfRIMKXn1pnf64N69ZnJ+hbcDvuMPnoSBsZ7W95nF0lItYfDIyHFw== -----END AGE ENCRYPTED FILE----- - recipient: age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXNzRrV1ZCT2c0MFF4OWJ3 - amJDaVBkYVhxamlHSmJqUmppR0VYS3JIaGc0CnNmWWU4SXgvSVhtTm16MzkveTNB - Z1JpN282RDcrMFBTQmJXM3dXZ0RhSk0KLS0tIGFVZ0RLU3Flai8zVmVCVzR4Q1l1 - WnArT2ZnVzNSOXcxMlpINkZnTVRHRGMKnipw+4xmmx+et2+0Z2/rrmzcZnrEuZe4 - oqmymovrhdaZDp2I8e0jhznId0ZZH9Iq1aJJyKuVAIUzdwb/lrun0Q== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUdDEyanpERGpaMFV2cE5n + dmg3QjYzNkk3R2c0Yk1OTHlpRlZLRkYrNXlBCjJYdWRNeVVCR1FEVXBoZlJwU0Fn + aDFpbG1nbXRUOHBZcG9jMGZqeFM1OUkKLS0tIHZkYkQ0dlN1UDBZajRhVWZXUHVR + ci9LK2JjSlVvaDR2UFpwWGZmMDhQbDgKxcvqSMhGzpxoP2OSdjs2KsA9cd36j+xO + JYBFmTQnb4oTTzMQZxMAowaiqDt4fLsD6fXcwBnclq2SwAGsOlzvJw== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-06T20:53:34Z" - mac: ENC[AES256_GCM,data:3LaUkQy4IViYIjKHOJ71pIcPipv3p44ENAd31270uGsZNmOAlGqPcylF7Dlc475UfKrHXAZaagGKF80VkTaE6xca+Uq9ihUg0U5ovLyVbxBXMEjmycCBJXaKry17kju3eQec5dinqEBQ7+uU39lSKdhGPPvbZDYxu3WeZBWzrSQ=,iv:VN+W6S8t9RW06DnSoo+AY630bo4PVF027qtanv2YRh8=,tag:urMNwqclobcL7bxCJY5NbA==,type:str] + lastmodified: "2025-02-13T20:19:15Z" + mac: ENC[AES256_GCM,data:qloZYbT1ht2wTzTVD5O57C/VVHy80yT0bIpB+mSjF9yvvDF38rpUS3FuZFoXoDeyaniCml3IUV3Bww/lHXoHI/nPr70Vsl+Q2n9FdUnD1JKfI/kLqvk+XM5HB8qqY4XFXhjwZOGrbN3v5Stgi+CWb2s8518g8OCSdR8pyaWDSqc=,iv:4v77gZzMfjMYyF4K4BOBCdYbxk0wa3zrruy7VD7Tux0=,tag:50/uxJDqgvaEItqMepWwoA==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ - version: 3.9.0 + version: 3.9.1 diff --git a/surveybot/secret.yaml b/surveybot/secret.yaml index 6634dc3..a45cc22 100644 --- a/surveybot/secret.yaml +++ b/surveybot/secret.yaml @@ -4,7 +4,7 @@ metadata: name: surveybot-token type: Opaque data: - TOKEN: ENC[AES256_GCM,data:HZpvxzlqgtHIXstqo+wH5h1SVfBBS7aV7fPEIGO3gq0Hu8wbqMDq8nzBnGHQik+5jR0AoYQvRKLqD+VyIPgHQX8Nc/15er+pyCxa2kLXXPg=,iv:3dcWIVEU7HzkBCA8IT6lHPzsywmW3nCM0HK3Wr8r5eA=,tag:QplCTrlD08dpZvZjBdvlbQ==,type:str] + TOKEN: ENC[AES256_GCM,data:WZam3tkyfl+fkpCqegB2kiBmuOMeEP73vnb0o7AlJi9iv7Y2zGvvIQ/oJfB0kCw7w7s+8mVMGG+iTyDVZeQdjPv1j4FRPd7GMMSo4qWVBSs=,iv:4CFd+2gvroLuG0IqzNWVR7s3XVlbvrXg3no5TBZmFVM=,tag:0zCH6nRw9Vt7YJ0jnDFx2A==,type:str] sops: kms: [] gcp_kms: [] @@ -14,32 +14,32 @@ sops: - recipient: age14uxgmvw26e7f82gkvxl0zwnfc5l75rdn5sms4zj0xrtrnlgn4qlsqh3kkt enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArcWErc2ZWMzdOSDY1L2ZZ - WXo0V3VPL2srZlpNckJQdFBOWnNmMkZiODJjCjR5VG5iOHA2UHVqUjFhMlZwbVBS - a3dYY3E5RVlvbGI3TFo2Q0RycEp5eFEKLS0tIFp2Qy9HTlk5U2plZUI1b0pzanpt - VlY2NlpYTG4yNlV3ZlNST3ViWWJXR1UKMc+fBij4aj16q7+1UDRJEBlLaW+ROr3K - 4ZsIMKPXkTiBc8S9lRzv8bmtT0a89wQGPp5ax8LawIXi8djDIxbAYA== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWTnJ3RDVMa2tGOE5TU09E + dkI0czh1TUNiQWlYUHE1bmVYSlIyVDE4b0F3CjR4ZFRYSDZqL2ptVHZwaDBvMDcr + cjBaai95MjJRLy9iSVBQdEFTdWxObFkKLS0tIDhCMnRzNHNYWnBRZTNFUUZMTU9C + YXlPeWVSS0pvTExiZ3lHM200VDk3dDAKOgPg5+uUivaV4sYLjdZ8QGAEGWs4VNC7 + DK1SqXemv6Kod8Jcn2Q/5Bs8SrN4mZyI4rmZ16c5iTjmHjmNBq5A6w== -----END AGE ENCRYPTED FILE----- - recipient: age1z5wtjmk0jw0j9qz9k5rrnp30nzqxrl3v6wgl7eryvqus28zekp4qpx9jc2 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrS3BQTUxNY1hTd25VUDY2 - TzlUdDZDSkI5b2FYOXdBZm1pbHIyTnNKS1V3CnFHK0hzN0FRQlJXRmdRdWJ1QTMx - eDlzNFhDMnNaMWxaM2VPWnNlc09TU2cKLS0tIDRIZU14MFNDOXRRWlNuVWJmL0o0 - WTdTNmpKaGxWVWFBY2tZTDVEUjRsMmsKbr0f7nyIJO9RO6eNN6A6O8qlkJhchrc+ - tfDYhV2TmOmbJhQQ/N4IVfW2ob/On7C1xCDpUnNnMM8ZNtOBSYY48A== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0ODVuZi9lN1d6SW9rRWlT + OUlmWEtlR3orMzVhNWd6TlN6bVR5dGFpbkJ3ClFuVnFYSTJhVE5zVlgyR2d6SU4x + OXNWMzJvUkNiUXpnWUpZTFI1dFE4UGcKLS0tIHVWbk9wUnNQT1ZsNm54Yzh6bGxK + MktuVHlwcjRrdHVLZ1ZucmNORnZ0a2sKFKIJKNf0n7FBeVNevO34/F4hPc/jxve6 + 4zvgzzz8m1cug6NSWYuek+/4tf5SxKeEufWqxkFXPrE5c0LJD4Nt4A== -----END AGE ENCRYPTED FILE----- - recipient: age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzSStFbzdrOTNKQlIxUGxo - N3lRVlkrbGZySDBvdEpVVXVWTFRmYlRpQkh3Ckt3dkdacXpsOWpKczlMVEhMNklP - aUovU0tSbDl2VnpTYkRlNDA3ZzZKRncKLS0tIDZKRll2S2ZJM1dxdExjYk9ZK2pB - ZkVXNEMzWWM4SzZycFZTWVNvWmdiVWMKumbG9j0BFs1Z6OksZjas3ZRUVmNMA6AH - dZPN0cRzWqAWAoVh8B/LBdKQorJtaSMajW73LqtJSzh4uoh5V+YjHg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3ZGJ0TW5QbkNqbmY2ckdX + dUwyT3A5RnBSNzJKVDcrb1RPZ2hPVjhNU0ZnCk9aWE5EcFErL1ZkajZXc2JqdGRD + TTJ2b3ZYVThoOUVGY3RqSE5FZjZJQjQKLS0tIHNSVTg3eXVIa25oOHRCcUhKNnkz + cUlpdC8vaVFoS09mU09tbzZWMU9HVEEKdum87k1RQN8uA6i32hYbFxfkqKYks4Ne + R+6wY+uzTvskB8nNcUNgUPFgXbm2wq1uJykO+D++LB9apMmV62JtCQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-11-04T20:00:41Z" - mac: ENC[AES256_GCM,data:dIghUTmsUH2deQGDv9Jykicf+kV4A2XYHqxOHq0TcR7G5V329U25tm4ID07kQKmJjSgPwTx/6Vadxu/Bo3ADrvMj5+bOCUENP5FcJEp8htkJHNlzn1syQ9VXu+Vbka0e0PpPJ4AlxM3toPdmRX4k7tP5FzVlMkxSwAjMsVivHYo=,iv:1094lyciqTvwdmJjCI761sRi42AXxyiFyPw2CSUqfA4=,tag:0LlLhMOn7l4NrFzmbcfPcQ==,type:str] + lastmodified: "2025-02-13T20:19:15Z" + mac: ENC[AES256_GCM,data:of9bxJ+sXhv1wzlES7otXjV12Qst9HdGt0CqYy7FjLNbFwUBJ88bS3zZzigB9rzuppN4TMSTG+xiQhD7G6W/yU0TIF5FDiVoXiJndt9IccaDLREizmasfeL/0pjNNPTgNU8b2fxXX3k/yhhhR4ZyZYOiEAlTpa9NzVAkUuO2jMI=,iv:BXLPw6EGCr7X9nIK63w8UrnAg6h67HPK8Lr6aZz8/WE=,tag:/qYwcx8uJtz/iwqoRMnblQ==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ - version: 3.9.0 + version: 3.9.1 From 2b64ea7e89114f52ac56989beb80a44abc59b36a Mon Sep 17 00:00:00 2001 From: Aaron Riedel Date: Thu, 13 Feb 2025 21:36:00 +0100 Subject: [PATCH 24/40] db restore --- openproject/db.yaml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/openproject/db.yaml b/openproject/db.yaml index a8c2fa0..8d735a3 100644 --- a/openproject/db.yaml +++ b/openproject/db.yaml @@ -6,6 +6,9 @@ spec: instances: 3 storage: size: 1Gi + bootstrap: + recovery: + source: clusterBackup backup: barmanObjectStore: destinationPath: "s3://openproject/backups" @@ -20,3 +23,15 @@ spec: wal: compression: gzip retentionPolicy: "30d" + externalClusters: + - name: clusterBackup + barmanObjectStore: + destinationPath: "s3://openproject/backups" + endpointURL: "https://fsn1.your-objectstorage.com" + s3Credentials: + accessKeyId: + name: openproject-secret + key: OPENPROJECT_FOG_CREDENTIALS_AWS__ACCESS__KEY__ID + secretAccessKey: + name: openproject-secret + key: OPENPROJECT_FOG_CREDENTIALS_AWS__SECRET__ACCESS__KEY From ba9eea8e28987da9a00e69834862d08a17d9b8d4 Mon Sep 17 00:00:00 2001 From: Aaron Riedel Date: Sat, 15 Feb 2025 11:13:45 +0100 Subject: [PATCH 25/40] start new with openproject db --- openproject/db.yaml | 39 +++++++++++++++++++++++---------------- 1 file changed, 23 insertions(+), 16 deletions(-) diff --git a/openproject/db.yaml b/openproject/db.yaml index 8d735a3..d0b33da 100644 --- a/openproject/db.yaml +++ b/openproject/db.yaml @@ -6,13 +6,16 @@ spec: instances: 3 storage: size: 1Gi - bootstrap: - recovery: - source: clusterBackup +# bootstrap: +# recovery: +# source: clusterBackup +# recoveryTarget: +# targetTime: "2025-02-12 21:00:00.00000+00" backup: barmanObjectStore: destinationPath: "s3://openproject/backups" endpointURL: "https://fsn1.your-objectstorage.com" + serverName: "new-openproject" s3Credentials: accessKeyId: name: openproject-secret @@ -22,16 +25,20 @@ spec: key: OPENPROJECT_FOG_CREDENTIALS_AWS__SECRET__ACCESS__KEY wal: compression: gzip - retentionPolicy: "30d" - externalClusters: - - name: clusterBackup - barmanObjectStore: - destinationPath: "s3://openproject/backups" - endpointURL: "https://fsn1.your-objectstorage.com" - s3Credentials: - accessKeyId: - name: openproject-secret - key: OPENPROJECT_FOG_CREDENTIALS_AWS__ACCESS__KEY__ID - secretAccessKey: - name: openproject-secret - key: OPENPROJECT_FOG_CREDENTIALS_AWS__SECRET__ACCESS__KEY + retentionPolicy: "30d" +# externalClusters: +# - name: clusterBackup +# barmanObjectStore: +# destinationPath: "s3://openproject/backups" +# endpointURL: "https://fsn1.your-objectstorage.com" +# serverName: openproject +# s3Credentials: +# accessKeyId: +# name: openproject-secret +# key: OPENPROJECT_FOG_CREDENTIALS_AWS__ACCESS__KEY__ID +# secretAccessKey: +# name: openproject-secret +# key: OPENPROJECT_FOG_CREDENTIALS_AWS__SECRET__ACCESS__KEY +# wal: +# maxParallel: 8 +# compression: gzip From 0da2c55bb86411b2312f4f3371bf0786a03d3cfe Mon Sep 17 00:00:00 2001 From: renovate Date: Wed, 19 Feb 2025 12:11:00 +0000 Subject: [PATCH 26/40] openproject: update image tag to 30 (done automagically via Woodpecker pipeline) --- openproject/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openproject/values.yaml b/openproject/values.yaml index 8050c78..7537799 100644 --- a/openproject/values.yaml +++ b/openproject/values.yaml @@ -1,7 +1,7 @@ image: registry: git.ar21.de repository: aaron/openproject - tag: '24' + tag: '30' appInit: resources: limits: From 3c04a04f5b70dcf28c6694b562e34e30f31fd90b Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 19 Feb 2025 20:06:19 +0000 Subject: [PATCH 27/40] chore(deps): update helm release openproject to v9.7.0 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index 22d1836..fa5fb2e 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -175,7 +175,7 @@ spec: sources: - repoURL: https://charts.openproject.org chart: openproject - targetRevision: 9.6.0 + targetRevision: 9.7.0 helm: releaseName: openproject valueFiles: From c33b788c5080a986465d0faa3e96aa98dcda1149 Mon Sep 17 00:00:00 2001 From: Aaron Riedel Date: Thu, 20 Feb 2025 20:04:05 +0100 Subject: [PATCH 28/40] fix cnpg backups --- openproject/db.yaml | 55 +++++++++++++++++++++++++++------------------ 1 file changed, 33 insertions(+), 22 deletions(-) diff --git a/openproject/db.yaml b/openproject/db.yaml index d0b33da..5e36749 100644 --- a/openproject/db.yaml +++ b/openproject/db.yaml @@ -6,16 +6,16 @@ spec: instances: 3 storage: size: 1Gi -# bootstrap: -# recovery: -# source: clusterBackup -# recoveryTarget: -# targetTime: "2025-02-12 21:00:00.00000+00" + bootstrap: + recovery: + source: clusterBackup + #recoveryTarget: + # targetTime: "2025-02-12 21:00:00.00000+00" backup: barmanObjectStore: destinationPath: "s3://openproject/backups" endpointURL: "https://fsn1.your-objectstorage.com" - serverName: "new-openproject" + serverName: "newnew-openproject" # in case of restore change this s3Credentials: accessKeyId: name: openproject-secret @@ -26,19 +26,30 @@ spec: wal: compression: gzip retentionPolicy: "30d" -# externalClusters: -# - name: clusterBackup -# barmanObjectStore: -# destinationPath: "s3://openproject/backups" -# endpointURL: "https://fsn1.your-objectstorage.com" -# serverName: openproject -# s3Credentials: -# accessKeyId: -# name: openproject-secret -# key: OPENPROJECT_FOG_CREDENTIALS_AWS__ACCESS__KEY__ID -# secretAccessKey: -# name: openproject-secret -# key: OPENPROJECT_FOG_CREDENTIALS_AWS__SECRET__ACCESS__KEY -# wal: -# maxParallel: 8 -# compression: gzip + externalClusters: + - name: clusterBackup + barmanObjectStore: + destinationPath: "s3://openproject/backups" + endpointURL: "https://fsn1.your-objectstorage.com" + serverName: "newnew-openproject" + s3Credentials: + accessKeyId: + name: openproject-secret + key: OPENPROJECT_FOG_CREDENTIALS_AWS__ACCESS__KEY__ID + secretAccessKey: + name: openproject-secret + key: OPENPROJECT_FOG_CREDENTIALS_AWS__SECRET__ACCESS__KEY + wal: + maxParallel: 8 + compression: gzip +--- +apiVersion: postgresql.cnpg.io/v1 +kind: ScheduledBackup +metadata: + name: backup-openproject +spec: + immediate: true + schedule: "0 0 0 * * *" + backupOwnerReference: self + cluster: + name: openproject From 88f5bb04f2d009fc324fa1420994b87ce3ab5092 Mon Sep 17 00:00:00 2001 From: Aaron Riedel Date: Thu, 20 Feb 2025 20:12:08 +0100 Subject: [PATCH 29/40] fix openproject namespace --- openproject/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openproject/values.yaml b/openproject/values.yaml index 7537799..0470016 100644 --- a/openproject/values.yaml +++ b/openproject/values.yaml @@ -51,7 +51,7 @@ s3: postgresql: bundled: false connection: - host: openproject-rw.openproject.svc.cluster.local + host: openproject-rw.aaron-openproject.svc.cluster.local port: 5432 auth: existingSecret: openproject-app From a2ea9111de5754ba8d56b12a64a7f3c889b409ec Mon Sep 17 00:00:00 2001 From: Aaron Riedel Date: Thu, 20 Feb 2025 20:33:41 +0100 Subject: [PATCH 30/40] openproject restore --- openproject/db.yaml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/openproject/db.yaml b/openproject/db.yaml index 5e36749..85f33fb 100644 --- a/openproject/db.yaml +++ b/openproject/db.yaml @@ -2,6 +2,8 @@ apiVersion: postgresql.cnpg.io/v1 kind: Cluster metadata: name: openproject + annotations: + cnpg.io/skipEmptyWalArchiveCheck: enabled spec: instances: 3 storage: @@ -15,7 +17,7 @@ spec: barmanObjectStore: destinationPath: "s3://openproject/backups" endpointURL: "https://fsn1.your-objectstorage.com" - serverName: "newnew-openproject" # in case of restore change this + serverName: "openproject-backup" # in case of restore change this s3Credentials: accessKeyId: name: openproject-secret @@ -31,7 +33,7 @@ spec: barmanObjectStore: destinationPath: "s3://openproject/backups" endpointURL: "https://fsn1.your-objectstorage.com" - serverName: "newnew-openproject" + serverName: "openproject-backup" s3Credentials: accessKeyId: name: openproject-secret From 79c867e271077623fa67b2b97fe1d1759e7cae0e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 5 Mar 2025 12:06:48 +0000 Subject: [PATCH 31/40] chore(deps): update helm release openproject to v9.7.2 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index fa5fb2e..412123c 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -175,7 +175,7 @@ spec: sources: - repoURL: https://charts.openproject.org chart: openproject - targetRevision: 9.7.0 + targetRevision: 9.7.2 helm: releaseName: openproject valueFiles: From 9b96f8b2908696deb6afc6a09214fb42ba4c02bc Mon Sep 17 00:00:00 2001 From: renovate Date: Wed, 5 Mar 2025 14:11:59 +0000 Subject: [PATCH 32/40] openproject: update image tag to 36 (done automagically via Woodpecker pipeline) --- openproject/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openproject/values.yaml b/openproject/values.yaml index 0470016..29df62f 100644 --- a/openproject/values.yaml +++ b/openproject/values.yaml @@ -1,7 +1,7 @@ image: registry: git.ar21.de repository: aaron/openproject - tag: '30' + tag: '36' appInit: resources: limits: From b1a3f676013329c97fd082b28f5163a139a7ef97 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 5 Mar 2025 17:06:50 +0000 Subject: [PATCH 33/40] chore(deps): update helm release cloudnative-pg to v0.23.2 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index fa5fb2e..14cc223 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -153,7 +153,7 @@ spec: sources: - chart: cloudnative-pg repoURL: https://cloudnative-pg.io/charts - targetRevision: 0.23.0 + targetRevision: 0.23.2 helm: releaseName: cloudnative-pg destination: From 38097bff59e1a2178a525e09a2f255bb706849ba Mon Sep 17 00:00:00 2001 From: Aaron Riedel Date: Thu, 6 Mar 2025 21:35:59 +0100 Subject: [PATCH 34/40] openproject stuff --- openproject/db.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/openproject/db.yaml b/openproject/db.yaml index 85f33fb..9ff8cef 100644 --- a/openproject/db.yaml +++ b/openproject/db.yaml @@ -17,7 +17,7 @@ spec: barmanObjectStore: destinationPath: "s3://openproject/backups" endpointURL: "https://fsn1.your-objectstorage.com" - serverName: "openproject-backup" # in case of restore change this + serverName: "db" # in case of restore change this s3Credentials: accessKeyId: name: openproject-secret @@ -33,7 +33,7 @@ spec: barmanObjectStore: destinationPath: "s3://openproject/backups" endpointURL: "https://fsn1.your-objectstorage.com" - serverName: "openproject-backup" + serverName: "db" s3Credentials: accessKeyId: name: openproject-secret From 7933147dc3daedca33bd9b8a3154943c34959756 Mon Sep 17 00:00:00 2001 From: Aaron Riedel Date: Tue, 11 Mar 2025 14:21:21 +0100 Subject: [PATCH 35/40] remove admin user from openproject --- openproject/values.yaml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/openproject/values.yaml b/openproject/values.yaml index 29df62f..d4e7a95 100644 --- a/openproject/values.yaml +++ b/openproject/values.yaml @@ -21,10 +21,6 @@ workers: environment: OPENPROJECT_DISABLE__PASSWORD__LOGIN: true openproject: - admin_user: - password_reset: 'true' - name: Aaron Riedel - mail: aaron@ar21.de extraEnvVarsSecret: openproject-secret oidc: enabled: true From 05c3a21f858a39788e17276682e97ad65a30bbc5 Mon Sep 17 00:00:00 2001 From: Aaron Riedel Date: Tue, 11 Mar 2025 19:27:34 +0100 Subject: [PATCH 36/40] yeet Drone --- app-files/apps.yaml | 35 ----------------------------- drone/kustomization.yaml | 5 ----- drone/secret-generator.yaml | 11 --------- drone/secret.yaml | 45 ------------------------------------- 4 files changed, 96 deletions(-) delete mode 100644 drone/kustomization.yaml delete mode 100644 drone/secret-generator.yaml delete mode 100644 drone/secret.yaml diff --git a/app-files/apps.yaml b/app-files/apps.yaml index 3f9bfde..7447a65 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -50,41 +50,6 @@ spec: --- apiVersion: argoproj.io/v1alpha1 kind: Application -metadata: - name: aaron-drone-runner - namespace: argocd -spec: - project: default - sources: - - chart: drone-runner-kube - repoURL: https://charts.drone.io - targetRevision: 0.1.10 - helm: - releaseName: drone-runner - values: | - extraSecretNamesForEnvFrom: - - drone-secrets - rbac: - buildNamespaces: - - aaron-drone - env: - DRONE_RPC_HOST: drone.ar21.de - DRONE_RPC_PROTO: https - DRONE_NAMESPACE_DEFAULT: drone - - repoURL: https://git.ar21.de/aaron/k8s-deployments.git - targetRevision: HEAD - path: drone - destination: - server: https://kubernetes.default.svc - namespace: aaron-drone - syncPolicy: - syncOptions: - - CreateNamespace=true - automated: - prune: false ---- -apiVersion: argoproj.io/v1alpha1 -kind: Application metadata: name: aaron-hoylogo namespace: argocd diff --git a/drone/kustomization.yaml b/drone/kustomization.yaml deleted file mode 100644 index d840c3c..0000000 --- a/drone/kustomization.yaml +++ /dev/null @@ -1,5 +0,0 @@ ---- -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -generators: - - ./secret-generator.yaml diff --git a/drone/secret-generator.yaml b/drone/secret-generator.yaml deleted file mode 100644 index 7f9b73e..0000000 --- a/drone/secret-generator.yaml +++ /dev/null @@ -1,11 +0,0 @@ ---- -apiVersion: viaduct.ai/v1 -kind: ksops -metadata: - name: secret-generator - annotations: - config.kubernetes.io/function: | - exec: - path: ksops -files: - - ./secret.yaml diff --git a/drone/secret.yaml b/drone/secret.yaml deleted file mode 100644 index 5aa2a4c..0000000 --- a/drone/secret.yaml +++ /dev/null @@ -1,45 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: drone-secrets -type: Opaque -data: - DRONE_RPC_SECRET: ENC[AES256_GCM,data:jrF3Y4c6HVYse2h8MhzPMTfLhD2VLmAGyr4yxjf0gFspTAVLcYwNtoJbjnI=,iv:7xGbWm5exOTDYJc3Uwj++9HWheyJI+F0SypeAmK7HcI=,tag:ksWv+zzc8fH9a193cNwYXA==,type:str] -sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age14uxgmvw26e7f82gkvxl0zwnfc5l75rdn5sms4zj0xrtrnlgn4qlsqh3kkt - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4cWRBQzFHTzR0WUNhc0Rl - dWlaTE9BTUFBb250c1ZaVjRrVUY3MjBXcDNjCmgwMjRzcFlmc3NhRUhkdHJHa3BV - bis5VWNCY1JFZ0ZpcjhJUWcxZXluZ0kKLS0tIFk1NnhSMWxvZ0JuSTFTV1lwY1Na - UW1YSVplRWNZc0o2UjNDUG5CUncvbk0KR/UDgABlTT4wA7CcE31LkPOMk7sXM6jr - rccWRqlgEyvD3AgRPQNUEZ/3nJbORhFLDt8jxsT4POFsDtZvxH1f2g== - -----END AGE ENCRYPTED FILE----- - - recipient: age1z5wtjmk0jw0j9qz9k5rrnp30nzqxrl3v6wgl7eryvqus28zekp4qpx9jc2 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTYkljMUlGZmtnNTU4dnR2 - dXFyMkNUeFVHMENZa3d0a3MxNGpyYlhSS0VBClVXaXBVTU9GWkNjWk9OakNxakJK - a29VNzZ1UGFqNFhWclRONUw5dFo0WVUKLS0tIEQzS2ZxeldzZFY0cWlvRzIvVkl1 - MGJpczFOcThtTlVrSUROMytRNVVkc0kK0iO5dHZA/PhRGczCqFa1frXGMfJE30Cq - ZVfX5HcndP/87F5dv8FO2A9EJz4riz/TjuOpxIUhinDul7JI0T4KQw== - -----END AGE ENCRYPTED FILE----- - - recipient: age1mraede6gqxkh2rkeq5fjrcflp7emenl2qn885asxvtx5erga2pdqujuexz - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBUXREYjJEUmVwZ1ZTTmZh - cnp4K3dYdmczQ3o5RWFzMlF3NTRrOHFaSzA4CnBFbXk2MXVpVUxudXBMRWJwQ0JW - S2M3UEp1Qys3L0J1KzNsV1R3d05zamcKLS0tIDhMaDFmeG1vZWkzWDBKWGVoNWJS - REFDWXpDUkVkSnkzSmNiMzd6a2ZsbUEKFoDTBpjI/VCPCeqE+hVNk0zswNEWbnNw - TTwVfQ1xOXD5FeH8B+9zHo14UTi/Cp9T4OIcYNduKar7K0rQLlgz6A== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2025-02-13T20:19:15Z" - mac: ENC[AES256_GCM,data:kCdPeuBOut4sXFYcp5uStaERQL8steUy1MZ51hWlP7sDfHpoKIV2oEEbRDlVy/2+no58WfH161J8gy5dw+B+ambwkcBShUA3D8yR8akX3ZlCSPR+Xp/KsUrtM5CtBmWpCiaI+0RZUnEXcRRWYPzHA4g2Hmrlg5mMmcD63zmV100=,iv:nXWlCN+DNLovf26fyCMDc0GmVtCaKB18pZUVpbqfjzw=,tag:QNT0A0SN8Vt992WAukNpmA==,type:str] - pgp: [] - encrypted_regex: ^(data|stringData)$ - version: 3.9.1 From ca79a67d0e4c248e9daa21ce063d3f6fa58a436b Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Thu, 20 Mar 2025 16:04:27 +0000 Subject: [PATCH 37/40] chore(deps): update helm release openproject to v9.8.1 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index 7447a65..94e31d8 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -140,7 +140,7 @@ spec: sources: - repoURL: https://charts.openproject.org chart: openproject - targetRevision: 9.7.2 + targetRevision: 9.8.1 helm: releaseName: openproject valueFiles: From 5ea16a7a2c25dd583d0197c798c70aca65adbd7c Mon Sep 17 00:00:00 2001 From: renovate Date: Thu, 20 Mar 2025 17:09:03 +0000 Subject: [PATCH 38/40] openproject: update image tag to 40 (done automagically via Woodpecker pipeline) --- openproject/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openproject/values.yaml b/openproject/values.yaml index d4e7a95..5150feb 100644 --- a/openproject/values.yaml +++ b/openproject/values.yaml @@ -1,7 +1,7 @@ image: registry: git.ar21.de repository: aaron/openproject - tag: '36' + tag: '40' appInit: resources: limits: From 8ff9647ab5b26544cce69abd68201ef1fae7ca24 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Wed, 16 Apr 2025 11:04:24 +0000 Subject: [PATCH 39/40] chore(deps): update helm release openproject to v9.10.0 --- app-files/apps.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app-files/apps.yaml b/app-files/apps.yaml index 94e31d8..a9bd050 100644 --- a/app-files/apps.yaml +++ b/app-files/apps.yaml @@ -140,7 +140,7 @@ spec: sources: - repoURL: https://charts.openproject.org chart: openproject - targetRevision: 9.8.1 + targetRevision: 9.10.0 helm: releaseName: openproject valueFiles: From 8eca61447844287f0fbe881724ca1284f271e85f Mon Sep 17 00:00:00 2001 From: renovate Date: Sat, 26 Apr 2025 18:17:34 +0000 Subject: [PATCH 40/40] openproject: update image tag to 45 (done automagically via Woodpecker pipeline) --- openproject/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openproject/values.yaml b/openproject/values.yaml index 5150feb..248477a 100644 --- a/openproject/values.yaml +++ b/openproject/values.yaml @@ -1,7 +1,7 @@ image: registry: git.ar21.de repository: aaron/openproject - tag: '40' + tag: '45' appInit: resources: limits: