From 9630dfa93767c596ae862ae2b5bf9e6f0f003dd7 Mon Sep 17 00:00:00 2001 From: Nikolai Rodionov Date: Tue, 1 Oct 2024 12:29:30 +0200 Subject: [PATCH] Use minio fot gitea storage --- helmfile.yaml | 1 - values/badhouseplants/secrets.gitea.yaml | 54 ++++++++++++------------ values/badhouseplants/secrets.minio.yaml | 53 ++++++++++++----------- values/badhouseplants/values.gitea.yaml | 7 +++ values/badhouseplants/values.minio.yaml | 11 +++++ 5 files changed, 74 insertions(+), 52 deletions(-) diff --git a/helmfile.yaml b/helmfile.yaml index 8213fb8..811708b 100644 --- a/helmfile.yaml +++ b/helmfile.yaml @@ -3,7 +3,6 @@ bases: - ./common/templates.yaml helmfiles: - ./installations/system/ - - ./installations/storage/ - ./installations/databases/ - ./installations/platform/ - ./installations/pipelines/ diff --git a/values/badhouseplants/secrets.gitea.yaml b/values/badhouseplants/secrets.gitea.yaml index 0341916..ae51c9f 100644 --- a/values/badhouseplants/secrets.gitea.yaml +++ b/values/badhouseplants/secrets.gitea.yaml @@ -1,31 +1,33 @@ gitea: admin: - username: ENC[AES256_GCM,data:hn9KbBrp6Ak=,iv:wg7E83jsBkxvBdKWbObizqWtfI1Dy1KnwAEZvnY1anc=,tag:UuX2qt/AVQpaZu251J4EGg==,type:str] - password: ENC[AES256_GCM,data:ETNIrZsYXVtMZh9/sU+RAV8zzK8=,iv:tOzJVOeEIJDfMIrbhQVOyHlPQH7pSJdrcQ5oeq1Hxtg=,tag:hILdhhYmix4O53ZdF8A+gg==,type:str] + username: ENC[AES256_GCM,data:hsx6HtKYxuE=,iv:M3tusJFSNFUhuJz1+MIXXIPRVsQnnHbP6JXR6r/HAUM=,tag:qbPfuZep4O3z/LPqmdlXYA==,type:str] + password: ENC[AES256_GCM,data:3f0ZsEUpNIvrMEunrFmKrkn1zis=,iv:BMjEA3BRvH1N09BJ9n3YCCrlhpSkB82ccZ4qsACmkZQ=,tag:hC3arqzL/Ls4dGr2aVTQMw==,type:str] config: + storage: + MINIO_SECRET_ACCESS_KEY: ENC[AES256_GCM,data:2VsiUFXZ6v/Tj14L5GiaSRW6ow05RAh1HQ==,iv:tzOYH/FL+LtVO9OmV6rzIO0bYbfkwB7oIyIyAuTQk/c=,tag:wBiPWIjDT6Qi52l0YVykBA==,type:str] mailer: - PASSWD: ENC[AES256_GCM,data:/wnVyhS6pBUJOE9PS39ZW+carVqn+WG+Sw==,iv:xraey6+BICLdsX81JLjFDGikj7ILqu40HJOY43nGBeg=,tag:ALkgbnK0QDVa1ZTHujE0fg==,type:str] + PASSWD: ENC[AES256_GCM,data:kVDMfKmxbIMJF17ES5zoYdS6lysBJyj5cg==,iv:YvfeHQhfsDup8KRVz0Bry8cDUTUC/LhJUCY9OL96mm8=,tag:4OY6gKTP5PHYiUGgOl6BUg==,type:str] database: - PASSWD: ENC[AES256_GCM,data:VbWIJV60OURufOh03zt2noSxb04=,iv:bHjeClvdB10byx90pFJVec3MywRYnTPpm8nfC51S88M=,tag:mfI4dNBZZtunMPZaVF8+LQ==,type:str] + PASSWD: ENC[AES256_GCM,data:Lbq1JtvK/svEo76GcWKXdxzpqZU=,iv:tYQYJUr2X/ZBXWz+J9IVhokzgDaZSCZUMnAU4kcndOo=,tag:UY0Lxupij6yz6BWPoKWJTg==,type:str] session: - PROVIDER_CONFIG: ENC[AES256_GCM,data:mtJYLatUA2VwE5MAX3KBceTS2eJG9mWlNAoHmsraPAcm9BeqpNf2OhnefnFiY6af9bSwC8/C/uXnOIBC12PuF5+DCp6ce8OsneaEsZKBVvurGc3fmCg2zDo/7VCI3EQ1BUZcAQIZl8cMTNMRfPhzwMug2LHBhYgS,iv:khZU/ENruxI0lwqCKz6VcdGFPok04/iyDT639OB3A04=,tag:ks6Y+ddsgXNZAW+XuYxLfA==,type:str] + PROVIDER_CONFIG: ENC[AES256_GCM,data:POHvdayjqUJ/PQ0KOP4K2dkmmiVdfOGng30KI71HMW2G6M2JONr180oONfmCnN3k3MzNYUpPAIzLxUL+a+COMcaR8IchJn8R8F1JFYsk6u0NaG67k1NbTATbgtDtssC8LqkE6xwAhI8iR43FTEvdHIRCQIXXSPxy,iv:H0OGUJNh1L9L6B5avpjnKVeu8UaFWeURZ6AyFvue3Vk=,tag:s7PUGjhn68cUMQ3/O5XWxg==,type:str] cache: - HOST: ENC[AES256_GCM,data:5E42e/2jSYt1qbDiU2f07isGJaKGfaps27y2+bVe/1DBhmVytVZNjidqyB2qS4y7Gg/XLbRKC7Dx2tbG0YE37unXOx3sHEHPQEBreSutXapEu3mcHFmhsIkSe7fatAntPZPdMkNZMm3I+AqJQSBH1FsMV7vlFh2a,iv:wuifOOnMIlyWygn8K/7eUH6NrhRkDWW85Ha9KuJWuJ4=,tag:bRX/HU74wfWKdH/MUYLuMQ==,type:str] + HOST: ENC[AES256_GCM,data:tJf0l2A896hmOzRojnFDe8d0bJuRJOGp6EwLLPkXnduS5DyAMW5dTK6WimWNIigKZjrF14c8NJBYXTDjMWyTB9HigHuQPomZqSZIViaFY0W6Kr0LBdpuUxW1wjFX74N90S0hEtajiBbG95YRzR9XCbjbKfI/i2be,iv:YXLZdpfYwwkd32bTOSLtEWA4skmYwYYm6N9WwyCjPcU=,tag:FNmXZFFeaCwYoKGFntNcOg==,type:str] queue: - CONN_STR: ENC[AES256_GCM,data:xrTWrgen3wnSKplk3r9BdXTd/wUY+QyphpKdlu5IaEGwS5vbUCaI3+JOg1GFFyeVO0Uaj00c1taIu4q9+ul6YMYaouMPSSJ9tcftzNqgA3ZaDeUzYnU/rQTg8SM6bxGYcLQMtN9zhO+BsmKJmC04J5ST2qu/OEqb,iv:EUmeVGQDBLVG3dwTsA0HQnliryWTmukFXdkAQkS7Whk=,tag:Ep7YVUJiGt3dHZHoG8MS6w==,type:str] + CONN_STR: ENC[AES256_GCM,data:0Sa3+2/uI1HPKh4rgR9wRUXI6SPc3tpn+VaRC7Nz8Crup1jzB0WfH8i1ZjvimlJuiZyFD3JASjdrMY9tIoVjDFW/JKlqGSpz6mF/Z9mVcIbgVr0GBGFRiMmI9lh57pviJXL8iAnPrbsBmePVwFMDQL9kjmWXZtPA,iv:yvwa9G1kUB29fnHMDljY3MOKFYAyw+P7iEVgxQ2r5CM=,tag:5LM1i2vvm3l3i2iJMrY9gg==,type:str] oauth: - - name: ENC[AES256_GCM,data:80trOTjt,iv:XZ7RlcsdueY43Q6FUM+LAZ0j94VQw9DU2k8KqLl3uMI=,tag:7nGXu3H4g/gBaJi2wyP43A==,type:str] - provider: ENC[AES256_GCM,data:jVEvNRAK,iv:0TuV5ZfSSP6ENNuWVtYDWWCmUkQbNy0fR59j1nywQGs=,tag:ZOqB7tf9xEeBSQSODWAq4Q==,type:str] - key: ENC[AES256_GCM,data:2Xu5PXhUWnWulSyR+a6oIr0YD0s=,iv:2+UFaOtd6WIOADn6/39TzHhNyTi3JJrYXQqrY57Qurw=,tag:K7vBwFGBM+77SVmU92Jhbw==,type:str] - secret: ENC[AES256_GCM,data:HEZNgZ6kQn5yOPUGyww+/rfYIGgB/vj9Yfsn3GFSUs31ZNe68G1huA==,iv:07hfyhw+KD2aR976IpWfAwjMXZC4uuz6hrXzOCRxIGw=,tag:WB57de5jqrxaSkyyc2DC+g==,type:str] - - name: ENC[AES256_GCM,data:sIdCMyXgLknP,iv:CiptgMsOQcgrCA4vUEWlmwAL8xrXW+lVN16zJ/TnrUQ=,tag:3OYYQVgGN+UYSGkYalQEJA==,type:str] - provider: ENC[AES256_GCM,data:abL1jCQ/SnikvaFy7Q==,iv:nqabj6UltKcauQ+PrYP7Ok2T0PrPbwlGrHwJKVHJyBY=,tag:Q+3hwSTPeWkIIalDFswJtQ==,type:str] - skip_local_2fa: ENC[AES256_GCM,data:hQT9qw==,iv:qsQlx2BrTpg5kmVspZsGb1zAiNMyWyX25EJGHWwLyTw=,tag:x1OW3mNVdSPPKfjat9JDBA==,type:str] - key: ENC[AES256_GCM,data:pgFH36E=,iv:cU6aHL2F71+ciA55UgiHm7oPDtSo+MUT1Pqg6igFZ1k=,tag:7BXwd/XUdYpwvVhBXinJug==,type:str] - secret: ENC[AES256_GCM,data:uraGme2NLEfg0FjXEVNtElD8g6MrZx10DFlsny3kOSQthE3Nie/RMLuF3ufBZcFaPoSjKX8Tu6BOCheEzEm/E2ghU32TmfAxSJVNMwupT4mHviop+mNSnxNt41DRDv2fM8f2QDFWEpH9t2c4uepR+aGfzt58KJ70/RS03j/st50=,iv:8cr8PaEk3sId+6hCgtf2bihUYqtBszIsy1bFpnB1eBY=,tag:MnrVoVuKdYPmc53o6D27XQ==,type:str] - autoDiscoverUrl: ENC[AES256_GCM,data:1ns+6vCF/3qASFR14KYX1su/YI4IAREjRSeG8ld7RmlvFeYu9V6uiHHLiSWPVcj4P9Gh82sqdiFh2YX/TcoVY/mVGopIPreUJNlrlr2hcofn2oYwILj6VBk=,iv:qhV0H9Kk/lMfgv4YvAv4hi1aX4DUN9SSUldJ58bWDfE=,tag:zzdxPxYHkOQWKqGAP7HO5g==,type:str] - iconUrl: ENC[AES256_GCM,data:8Ez2F8q7SbDHqEioLLNjwApuFyL1HvuxsdODVmVRet8XAef+gZcXS6s8rQgSbRaiI8aEKItc8or76Rd7VqS3sl+0qU2wPQ==,iv:YE1xtNurA+sNLQaiSQdkz1u0eWMomrI6L3SBVSzNJng=,tag:9CIDfwYc7h7i/iHWmp5UKA==,type:str] - scopes: ENC[AES256_GCM,data:1//BjLyrku25qJqzbg==,iv:7wy1jDCFRBH78oe7KnbAtxFYQvoaBBCzAUHGOCkyJMA=,tag:lT64XKj/rHiKfCIvyrOR0w==,type:str] + - name: ENC[AES256_GCM,data:AAWkVRB8,iv:hNgMigBd3+AD3LbGo63++zz3GSLloOsx76NhQaDMgQ4=,tag:xi1A6dr9wnjOfUOphUZjYA==,type:str] + provider: ENC[AES256_GCM,data:j0X9Tr8S,iv:KHya7MLljN21SG1T1I4ex3HhyX5kPWS1x+PzVKuMX08=,tag:qq0h8WM03zBQTF0LPxVttQ==,type:str] + key: ENC[AES256_GCM,data:BD5N6jL6hEtTf1rB3APLSdSC24k=,iv:wx6WL3+Cyl6PxE5ghJJ+CqNsu/NZM31LzGtrvlXae7o=,tag:kyIRqv5vohtMMikO6WF0nw==,type:str] + secret: ENC[AES256_GCM,data:Sb0OTFlymqePyRXxt6GG0xYZbjriOtQj6R2wwzBzRZwlRrteMyvwqw==,iv:F0N4uFol3ZJMlFBos+kIXN+oNj5d6ISslFbpBlV748M=,tag:tz+hMQiWCUpnp/ea7j2kjg==,type:str] + - name: ENC[AES256_GCM,data:xxpPPX6REGw+,iv:xHmvOds6K1sLLO9iNTRhNe7m0OfMM9+dLUJhF4IN6kw=,tag:IwGcBFf4d45jPoJmncl5Pg==,type:str] + provider: ENC[AES256_GCM,data:29yi48wJpIeNP0cAUw==,iv:ZGL8MXlVdo5/w8i45c4hc2S/a3bCEW6a8R5S8VwlKRs=,tag:K34SZqj2jqlNHg5Jq8Mj6g==,type:str] + skip_local_2fa: ENC[AES256_GCM,data:p4mmhw==,iv:BV3bKT5KYLRR5DRLhSDIaiWJwgHWhrrMT1gYlE5A86s=,tag:xrypSlW7WoxCgQhYaZQ30Q==,type:str] + key: ENC[AES256_GCM,data:pSLyUtg=,iv:8MaOGxDrR/oVw6HJt4Boz9UHzG2WGIkgWA640O5kVnI=,tag:5uCvJvLg2O3vcvEpNBIlYA==,type:str] + secret: ENC[AES256_GCM,data:J5FhHgYfXwT5nOVCGKIvmvUt2NyQt7iVZw1IyjWX+pRYnenlpTNHEvtSzYdhqfsHtBS+/BF6Yc6myZDzV9jxkv4+wc5hGJ+1YuVWlRALvteqo9KK6tKAbWmCvofP73P4jjp2G/C1S+RP+UGWaQaQF8PXtlKO/ddxOWb2y/5PU60=,iv:7ltciEByDokTLvWsuvgqovquv6tiYwRjZwrI/DpWIuw=,tag:/SO2wYIbCAkUMgqw9VK+Hg==,type:str] + autoDiscoverUrl: ENC[AES256_GCM,data:dr3O8S/CRiH9FJjJpiLK48BV2aAT1jkBk6d0A533Kk2hgplxhrS93Rprml+RTYQhTFjmPU99NyS20bvNSMeLn69XwO/bPj1yiR8zj6eTsZcRtUktJquvwEM=,iv:6DpmICutXnG38brPhzfUO9h5Vnbf0P4B0JLPvliMbjk=,tag:sFIun5XlMsgc0yAGjg8zbQ==,type:str] + iconUrl: ENC[AES256_GCM,data:Obmyv6YQATSkuty2EdYeWEccn2hXojK0NAmaqCwPgEbCp/PSD/7jucHt2/O0PjwwfjOPbyx4360KZNja0jAbJqRA/ErHYA==,iv:k5/ZszN2rW49PdyiqxJK1vtBo++w9M0aQyqDf+N4sq0=,tag:Nt99LOcTgLGKwOeqmGMExg==,type:str] + scopes: ENC[AES256_GCM,data:G3puTpfgMR1LV5GBxg==,iv:yxp8pLm5bsTIojJkf/QHtVGGYMBXtJylfMTNB5rO0i4=,tag:gh1qpCbaUdmsRiim0vZ7Bg==,type:str] sops: kms: [] gcp_kms: [] @@ -35,14 +37,14 @@ sops: - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dWNmQjdITllRWHJCM3dv - Z2lIb1lzcFZ6eWxiVkxKcWxBL3kyYjNaRVZvCjhCVXZTaW9uaE5pMExFR2w4RGpm - a3ZPcGFXWmRlQ1ZUY1FITlNkR0NzY00KLS0tIHRKYnZCajN4cFJLY0EwNUVhbTBw - TUh6RTJWQXJsbkFCNERmYWJzL1VQancK+MaDoG78tswXqtQY2MYYtsAAgcVvQqGh - 4i5OmTztBp3rpAM9DiT7TASvo1vz3UEak7ApQdaM2PpteiX8VZhIQg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUeFlhQXM2bktYcjZTTjlO + OFJ4cXFCS011NE9uU1RQdGtINVoyMWxiZWdrCk5EeGZMZitQZ1lMT01mdCtCL2t1 + aVFPdDl3RVRTL0lSak9uVzZacDJyZXcKLS0tIE1GVEFycmxxRVJ4RXV6RVQ3bzVI + clY5Q3ZlZkYxVDRMZHFLUWorQzU1MXMKoC2KOVv1i+s3cR6F//S3/FgLj8m3F+GG + 4ne7Ch3X3Csl9P9x8Go+zf2Or8hDIwQSiWBNdC0U3qKMY5s/daxznw== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-09-27T20:08:06Z" - mac: ENC[AES256_GCM,data:Gun7zcN1//UmvPMTi9Fd1gDYIO0HL10n1LhsdFdp6/CGBcjVMBM0Hvpq2VqEN37ipoeENEiKn/KOWkJpbDwz2HE9hEbQ6gSZLKILi/vY2hn76Uc2m6nAVRjSMfCryE7IVA4Yc2dPwhRAjn6ABf1gzWoh02ULjahCNgJ+K7jJJjg=,iv:3JuoL7rpOOhgunAOdhaS7L0X8qG7X3qNGQWQkqcPhu8=,tag:Q5BEt7XDZmY4sNG6uk8QAA==,type:str] + lastmodified: "2024-10-01T10:24:08Z" + mac: ENC[AES256_GCM,data:XHLCW04cKbqolXnUN3GhqfZNXjKtMp38OarMCJ9k0HQfjt7w7wq44JpzaTNkMN0oa8oLe+EMQyjTaJSwECXgTnkTuB70IWtPPPcdkF/V0iKZIC4e/rFrGPyh1cgHcsocl2gK0ATcdv5+yjo6vCVssba7O8em+H0gZ9Ty+/InhQc=,iv:Smo/UHXw9+EmgsdwBhDWGDIrVdASg8YihfIp+h/POvw=,tag:O4SMZkGUX1wt1ZEokQEbMw==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.9.0 diff --git a/values/badhouseplants/secrets.minio.yaml b/values/badhouseplants/secrets.minio.yaml index 90a57bb..bf51ab7 100644 --- a/values/badhouseplants/secrets.minio.yaml +++ b/values/badhouseplants/secrets.minio.yaml @@ -1,24 +1,27 @@ -rootPassword: ENC[AES256_GCM,data:Sj9QUj4bQqZz9ZRSHulhHRcYWVE=,iv:AFGPrsiRA6gs075gjmWLg8qb1pz217Sy7nLQHgKy4GM=,tag:coHd4NZ0p37lYcWh7Npt/w==,type:str] +rootPassword: ENC[AES256_GCM,data:O3sU0X3qFeTiodPdVdlnpxBV6Dw=,iv:leHInQACT7j69t8tcCoD1W3i8hulAdVgKhJ833UtvuE=,tag:iRgiVHaS1H0jMm1q0rjiqw==,type:str] users: - - accessKey: ENC[AES256_GCM,data:KHXcm8I9Cpo=,iv:DU/nva4K5E4IkZz7N7xfESZncKnQbof6Sv8rJbTwVRc=,tag:4WfJkd4t0eqkr4/CIEXl6w==,type:str] - secretKey: ENC[AES256_GCM,data:cRGWP6nIZGYws9AUgAkwmoET/g==,iv:Qu1c6xLzFpDRWdUM/XIjIkO6KknIOeSRHb/XEm44+rc=,tag:+NqHXmZNLFtCh/L9/rW+rg==,type:str] - policy: ENC[AES256_GCM,data:7Ptdd4qFo90=,iv:Qx3Ynm0Vjl+YPVAUNtXUpURf9n+PPkM34dBewMW4zss=,tag:sIgimJx3u0xcikskVr1L1g==,type:str] - - accessKey: ENC[AES256_GCM,data:nxWz,iv:l+kT7y9qtzrASOaIIcCoKbHaCdYnn4RnG4J+sqtCONA=,tag:wK6RatUPQMnrqML2bSJKhg==,type:str] - secretKey: ENC[AES256_GCM,data:6fATAB+2lypheqVMjgsDVyPiYTHoPeI2Uw==,iv:9Rd61bueMrsW/XJ7F0oK5LIvbVegaZLBSiABP5q01EY=,tag:WfwkhxuAb+irrPjQdAMQMA==,type:str] - policy: ENC[AES256_GCM,data:Iwu/,iv:+FhFi0JSGGH4sqEELv2xAr3uZnRIS9gljw0OJQR8HUA=,tag:iscBtaxpr/QC7CNXHSfqkw==,type:str] - - accessKey: ENC[AES256_GCM,data:DY9K2kx+xDHo,iv:NUVRo7n+Arivki/pC/CM5C48mqX2Ho+MrlB0z2NJffw=,tag:UoyAyXl5Jf1w3z9kycJIWQ==,type:str] - secretKey: ENC[AES256_GCM,data:xnKEaYxgSTMsPAT8vU2bs2lX0lY=,iv:QXDB+2Uneq6XXaKeIY17pl8rPuej5pGux1VA8qVhYOQ=,tag:c4jFeNf9kzQONISOaZ+Jow==,type:str] - policy: ENC[AES256_GCM,data:acfH2yD6RDmt,iv:3W80PJaAZHNIPlt3VutN5HNAzF+TEZw7F+MTBi60A0w=,tag:Kl+lObipEDxwgeYJQpLomQ==,type:str] + - accessKey: ENC[AES256_GCM,data:3j/8y1M3pU0=,iv:YpBhagbOxV8M3ouAUb0h51ePEjpkS8cYrkoFFhvYVfo=,tag:PswvP4au0x3pn5nsurmR2w==,type:str] + secretKey: ENC[AES256_GCM,data:IO7KhFwDXIH2r/iMsliqrlVzWg==,iv:mZtFE5+LDldoicjfibG9XaSeu0q7FuHWEJ67eqYuHSw=,tag:E2py0sEDWDpV7EthtnB6ow==,type:str] + policy: ENC[AES256_GCM,data:T+WB4uR3ITw=,iv:9aKnBcXrk8B7kzkqFcICiYutmTizndisGBagargPAnQ=,tag:m4IGYwlXjTet1c3AAkqFoA==,type:str] + - accessKey: ENC[AES256_GCM,data:W4FQ,iv:GMBbAwEo7fDVEZi2W4r6ODYMFflA7N5BybUIb+7XpEw=,tag:K1ZbwnBUUWcjApoVI8ueCg==,type:str] + secretKey: ENC[AES256_GCM,data:9JZre6QOEGrA9Xm1UFnmOR93VB/Et8XdbQ==,iv:0qRpqKaZ2e2I9KcLJP2hU3KykCIBu3oDRvqnIcADc7U=,tag:ltARnaSEnAxp9hmZms8F/w==,type:str] + policy: ENC[AES256_GCM,data:51Oj,iv:gdBAKYRNeXModDcJBmz1hapHxIs5ubVBxAIoxJMhufE=,tag:wwUP1CFGqLUKW8lfkuaSpQ==,type:str] + - accessKey: ENC[AES256_GCM,data:vuuzRTQGIPrJ,iv:8u8QSmF604i1XQcEE+rJiDTeGdkqk6Y1fpnGFFRRoFI=,tag:CAFV/1teBBZXV0+XKBfbMA==,type:str] + secretKey: ENC[AES256_GCM,data:kKXPljfQ6S1bd1e0zMVZ3IFCSRI=,iv:fIN7GOVjztfHk+jIpcvuWGRVqNENrWV2f05d+TdHyhI=,tag:VVX0zzRD91+CzxFwROshCw==,type:str] + policy: ENC[AES256_GCM,data:aMHwISW3LUEN,iv:PAIOUKrIJuucOIAAnOradrce6LJl6JN5o+LdVQ4WY00=,tag:5Pb+Zc4ZrYnS0pNIzNWT9A==,type:str] + - accessKey: ENC[AES256_GCM,data:jbqbh2w=,iv:qdu2+wD53+tC41J6ulShkAhVw6H0J1pUfyqm7rYGVpY=,tag:nykfL4W+Tjsx3mHEOANwEg==,type:str] + secretKey: ENC[AES256_GCM,data:pCumHuYMRkL92Kh1BtkTFpTmalmQ2KqXbw==,iv:6lx1fXDrgCAEl15SmwhphUzUpfI2PE0Oc+180u4qyAw=,tag:4qdzozmME/Lda8Hi0DObYg==,type:str] + policy: ENC[AES256_GCM,data:u/S47qs=,iv:pGy2Fui/NNr335BX1BOOGGjuIHy03oE2lOvxhy5iDEU=,tag:ax+45aF/i1Rcm3NF2+n2vw==,type:str] oidc: - enabled: ENC[AES256_GCM,data:ZFm6qw==,iv:0PW79J4WHM4/aOujVOQ4pBbOTNFlPnSLyOuYq6mW7NM=,tag:iDu+djacM/hF7XftA9oZUw==,type:bool] - configUrl: ENC[AES256_GCM,data:hi2fDfbiDYViKHsdRocRfZ/I8NNACHUcjcbdGHNulUEV9SfnJDEkl7XqzGDw43DMOCqMwiaTqtLbc2dciaO2sNz51o4Snv/pw30/HOpws6quLD2xTYg01Wk=,iv:NVoS1cATyNV0Wmx5PAo3f9UTuS4rx13tticp6A5q02s=,tag:KxbPIlglfDbcZuiZIBb/+g==,type:str] - clientId: ENC[AES256_GCM,data:g7vcvIc=,iv:7uo+/lJ1F4nV1e0KdmZxaoPBf0hY4z6xgGVOEowF998=,tag:zJmSCtdskALb1Vm8D3BbCA==,type:str] - clientSecret: ENC[AES256_GCM,data:yzbQS6EwjTlpfOKMr3G/gmkCz+LgnJD5PaLmDFS0LjKOf3KFoQacEtoaZJNQ5vJXoquxNxRAANk+k1YtGaR3rhnl1b+KA4ALbI+KdTi+pVXpiwYfr334NMIRWz0sRnBgwtta1XructaZZuZzRgoqKdf5AcED+LzwO0423IT4HRI=,iv:GUAZb7tc/gTHBe+J20yN0AZZr72ZtgETw67tEk+3jyU=,tag:bKk31NWsnKwuZHov0jLcEw==,type:str] - claimName: ENC[AES256_GCM,data:6/fc01iw,iv:vqi1DBRswmpYi4rHxgfbVtQvfc6YJ04zZAsO7rtWn4Q=,tag:RjFgl5T35E1o59BRj1Ru3Q==,type:str] - redirectUri: ENC[AES256_GCM,data:OFWVS48jpUWlMrTy/6sboqj6Icp+Gqg19Gs9muM8ChMZC4ZHO0S+iBjnoI4OOjQ=,iv:yMJl9/yYAOyK3hs+SzV+XcjiRM7fu/viIEDgsRCBji4=,tag:wxcQnym0s1m+WA+sjxqtHw==,type:str] - comment: ENC[AES256_GCM,data:jP73sH9gNlGAXUJ+K1bkq85JlVg=,iv:cY9CGDibHX6qaXAaoZxv1YlikGyq7Dx3N3QZVjQC9N4=,tag:z1OlTgEDreJIejdr4YI23w==,type:str] + enabled: ENC[AES256_GCM,data:1QLtsg==,iv:byOxT1fJsjp3TYxa88yKrE5qNXvIy1ACr9go10e3BeU=,tag:vBkXanfsoV4CCEkSgJq7NQ==,type:bool] + configUrl: ENC[AES256_GCM,data:FtU0Oa2UcAW/24FocfIrQuSrMPn/hv6MP9GI8fLgIyv7Z7tDmnJh9VEHcpnWMBjUCv0cCv0p1jNOaAfJVrETZ+GX9Jm4J9KHOYIWrf355SahmrhrHBSJ79A=,iv:B49pmuz07qkOa+dmJqkOvEsQKXjA5rHr85TwDoM3rl4=,tag:e6wCBVKi4qBwIkSZaL1v0g==,type:str] + clientId: ENC[AES256_GCM,data:LOCR2x4=,iv:4eGhAz1FpFbpvRByrhIGX4SXDA4cgnBai1jChc/VgcU=,tag:0lEKGDKM27zkrFruL2tn9w==,type:str] + clientSecret: ENC[AES256_GCM,data:x77rftDKcITMk+DVQhgPRpRGycw8x7BcHOaqR9GpM8vLP3G/Vx8io6c5OZBRqwBBsN9vshAej3vegvMmCHn8H2W6RYi6Qtk5faKFW0eKdRks4PwLbxrdVcjdVVQEFJXcwl0Zg9Qb1UH99OCl+HNgqCam1KKBc1IYVMMQkkY2VKo=,iv:zcWdl0bEJ9R8Lu3hwxDmRQ53biyh9s+0r/q0p7HDlX0=,tag:7BXwQlOIGnI1/L1RelLmXw==,type:str] + claimName: ENC[AES256_GCM,data:MlOxqMeB,iv:URG7IG2KV1Ef02K9VvDv6nGBHv4psoBea5B1Sv7WIb0=,tag:UO09riMtp2JjGOVl5QNiKQ==,type:str] + redirectUri: ENC[AES256_GCM,data:S0vQObd2gMBYlEj9O8xllLhS8dmf015av7rXcRJJJzqB3LI5hm6elIycvwBo+kE=,iv:OxVhUax+L37XFXYs8uXU90/hWqjxEHYtcrQyCgO0REQ=,tag:oRvPJ8O2z5IJ8cP97dkqAg==,type:str] + comment: ENC[AES256_GCM,data:FbAal8KkDHLQzsvOghDgpfohlK4=,iv:jzlt2wWf0Fn07fpFRlK8rABHq75orAoQla60RDciErg=,tag:CaTdTlsWBR8HgTyq8t0fNQ==,type:str] claimPrefix: "" - scopes: ENC[AES256_GCM,data:luQZB3bMQFpYb7/jF8S7tpNRvPYHHPDGRrRj,iv:dOgJXm0A8Igkt2/+nh+qkdm/MqOptAN81QdzNeW4/zA=,tag:E7IynZU/Lgag0NnnP481VQ==,type:str] + scopes: ENC[AES256_GCM,data:pyL2d9r0nhYSscXKcMwUphGEinYaT+lYrINI,iv:B5yKsgprBI9Gsdhzxmz2gg3cc6wvJFUIys6Z41RvSZk=,tag:mSPFtfR59h5Qj8VN27dBlQ==,type:str] sops: kms: [] gcp_kms: [] @@ -28,14 +31,14 @@ sops: - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwZm42QUNidTcxd3Zyb0E0 - N3RPNmhpRzYyUjRYVUh4Y2MyT3RycW9tS2pvCjZpV3BRcXZGbnREeWV0a0IzYTlM - Z0QzNzRwRU0vQ1cxY2J6NjBCclQ5S1EKLS0tIG9VMzhzSFFtaXZwNnQ0R00raVRY - azFqS1lMejc4NW9ZOEcyUHFTKytKSjQKU90U4aJ1bftcNGHk9VPgywu4rIZgg2TF - tdnxgzY9s8dfB9nYNP3bOINLhcS2tidMpvFYEJAjtr1SF4fql1qMlg== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZdjN5SHRLVW10dDJQM2Jw + d2NJdkt0OTdpanJieWFiczBGK3pudVVZUEVrCk5zR1pZSWc4bzBZOTVvYXNjMDVs + eklLMWp0blNuV0JEamxMTi9ZSzdYaWMKLS0tIEd2M0tGTDdZSytOUlJNbVdWVFdF + ZmZRZ1UrNTNLYkZiWUtOMEN4VUZ1STAKnY672aGUgQzE7r89vK6bP/nSZu8E0LTZ + 0dk1iBy2Bde8Bjs9bSuAVI+B5hABHmS2gnyw6etodWmzhTxpEADdKA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-09-28T19:29:25Z" - mac: ENC[AES256_GCM,data:rg1ttNw4G/DN1hS8h4QR8U5Xl8lfWDUydlg28kcP63wqPgsKx3v2SV8AwYGZqmEfYjfhMIae+cYDzt7nO3QnSAQdql3N+wu1YU+QH272FVyITGoZ9bGvKoNOJ0/bOdUQS5Ew05YpwNRqwY+6LlgXn+hGq1YMcW/iAmnPQ3jdaOQ=,iv:2YczF8RpdVtA0GMtmttf6mkBBOyah28yjO0zIJTQ2Og=,tag:v4X4+XYzfLeWb6FYFbFW7Q==,type:str] + lastmodified: "2024-10-01T10:20:14Z" + mac: ENC[AES256_GCM,data:GhJBNo4wtEExHw+XIUHuMaJv6oZTYCJ52+Hcyhf6DMp6t/AxUL2sWPLVfM8RZRV1SHUDDJbmOQAP0EM4Lpsu3n9OsQxQ3t6nd9oOs6FbYguJ/vwaHrOnC9GmvCqmuDjWfArGW/u/bIa1U5KRWYUheG7856IprClLtiGsHv/5bo0=,iv:rE8r0vDHSKDTA9kyQnDhqHyX6lc1HrUYWtPP4O/zOIE=,tag:3ofp8NT+vMA4wu4eQFToWQ==,type:str] pgp: [] unencrypted_suffix: _unencrypted version: 3.9.0 diff --git a/values/badhouseplants/values.gitea.yaml b/values/badhouseplants/values.gitea.yaml index b99b968..c522eec 100644 --- a/values/badhouseplants/values.gitea.yaml +++ b/values/badhouseplants/values.gitea.yaml @@ -81,6 +81,13 @@ gitea: LFS_START_SERVER: true LANDING_PAGE: explore START_SSH_SERVER: true + storage: + STORAGE_TYPE: minio + MINIO_ENDPOINT: "s3.badhouseplants.net:443" + MINIO_ACCESS_KEY_ID: gitea + MINIO_BUCKET: gitea + MINIO_LOCATION: us-east-1 + MINIO_USE_SSL: true admin: DISABLE_REGULAR_ORG_CREATION: true packages: diff --git a/values/badhouseplants/values.minio.yaml b/values/badhouseplants/values.minio.yaml index ba10600..e8f86d5 100644 --- a/values/badhouseplants/values.minio.yaml +++ b/values/badhouseplants/values.minio.yaml @@ -107,6 +107,10 @@ buckets: policy: none purge: false versioning: false + - name: gitea + policy: none + purge: false + versioning: false metrics: serviceMonitor: enabled: false @@ -171,3 +175,10 @@ policies: - 'arn:aws:s3:::minecraft-mods/*' actions: - 's3:*' + - name: gitea + statements: + - resources: + - 'arn:aws:s3:::gitea' + - 'arn:aws:s3:::gitea/*' + actions: + - 's3:*'