From dd0639abb59ff1a73dc6957e15ca497d663eb239 Mon Sep 17 00:00:00 2001 From: Nikolai Rodionov Date: Fri, 13 Sep 2024 05:23:44 +0200 Subject: [PATCH] Configure zot --- installations/platform/helmfile.yaml | 2 +- values/badhouseplants/secrets.minio.yaml | 67 +++++++++++++----------- values/badhouseplants/secrets.zot.yaml | 44 ++++++++-------- values/badhouseplants/values.minio.yaml | 11 ++++ values/badhouseplants/values.zot.yaml | 12 +++-- 5 files changed, 76 insertions(+), 60 deletions(-) diff --git a/installations/platform/helmfile.yaml b/installations/platform/helmfile.yaml index d80f78c..b744763 100644 --- a/installations/platform/helmfile.yaml +++ b/installations/platform/helmfile.yaml @@ -45,7 +45,7 @@ releases: chart: zot/zot version: 0.1.61 createNamespace: false - installed: false + installed: true namespace: platform condition: workload.enabled inherit: diff --git a/values/badhouseplants/secrets.minio.yaml b/values/badhouseplants/secrets.minio.yaml index 76bf4ef..d3c8a27 100644 --- a/values/badhouseplants/secrets.minio.yaml +++ b/values/badhouseplants/secrets.minio.yaml @@ -1,35 +1,38 @@ -rootPassword: ENC[AES256_GCM,data:590lWmGK19hcFCuTIXgV5aXyJH0=,iv:T3KHE21UnDNiePZskMyf0FKiPlHEr9tO/QoRO9W3M/A=,tag:HvZFdLADzd99POGZeUx4zg==,type:str] +rootPassword: ENC[AES256_GCM,data:Ctq0cxVoFdZPZd7sJrGmFjS5jDc=,iv:TMPe4r0BxFIz1SacgGbuGH/Wc27w7fFL/2cJ1lpbGG8=,tag:GMoxMQWQHBjUzMnByR+bhw==,type:str] users: - - accessKey: ENC[AES256_GCM,data:C8j0BB47C+U=,iv:9YwkZO6QtJXJ2vo6HF13BOJ3kjueEFGt+L/yHTLykKo=,tag:u4Ec+XC/JMjAkAVMNaiuCQ==,type:str] - secretKey: ENC[AES256_GCM,data:Tf5vlbvmZT1XPKbAOPW8IcuXqA==,iv:GTKyoyCCqcZkF6VFeutMQwdtL1EbkMHTs50LDTc/Yyc=,tag:3jxedHmuH/RdYzLIDag1OA==,type:str] - policy: ENC[AES256_GCM,data:7R9brCdGZWI=,iv:JPgs+Pe8yluwG4YcY2Zo4yFL0DCIdCVrosRgDODIUao=,tag:NnBPmPzYSjh8ClEnMc711A==,type:str] + - accessKey: ENC[AES256_GCM,data:oBCUrV/01Tg=,iv:v37Epm1wkOipwoj4kjwymQRH6vgH8Gtg8Zhb9WWIZB8=,tag:MLGzuECS3RQ+/2X7f5Q/xQ==,type:str] + secretKey: ENC[AES256_GCM,data:GVKFQySULmuGpBLWbY8q7VcygQ==,iv:Rvqvk5z9UiKdK8F5kQXKKXOWVei9sdFTDNvVWIqW0tY=,tag:cFYWor0Lhq5LAXz1wBZg0Q==,type:str] + policy: ENC[AES256_GCM,data:yXcQcUu2NHc=,iv:+B7sWXMnJtDDLXwn01jwWN1vmahGfRP5l9PCahwdUjw=,tag:LeL/kOZjRCERIRCJ3F5/0A==,type:str] + - accessKey: ENC[AES256_GCM,data:zmN8,iv:OTIBikywIIhhaTFUTUYLTUbVovp4VCa3XMresJ8id3A=,tag:HdgLf/0V6ZGmWXH4ybtS2g==,type:str] + secretKey: ENC[AES256_GCM,data:aObcvWk+FYWFlgxpPvXJWpKfb7VYfO9DOA==,iv:4J6mHoY94Lw5qcK6+JpSo+QVrLKeBCapO7xHznvV2SU=,tag:J808rKrdkjDQ+KOypda7nw==,type:str] + policy: ENC[AES256_GCM,data:7kOF,iv:NfwTGWwkPAYtVSBfE9N6mjxkZeP6thuhJBd9wvfGUX0=,tag:pGOL2n7vpRIwW0B/wjIq6A==,type:str] oidc: - enabled: ENC[AES256_GCM,data:v7bnBw==,iv:JJCvuhtrSYrjznP5iktZ3IQ2fNGy5heuiFPrTiEXRjc=,tag:K3dZHT0WtM8eQXPnD4mcHQ==,type:bool] - configUrl: ENC[AES256_GCM,data:8Q3qOVbAwKhDjoGGcmALPpIaJSpP3JHTRD2WooZdVbr74j21zVOJLAfiWIEtYfKa2sjPAVsmEIA2Pi7bddPrHHm9Tbiai3x7GgjWezSnJMYRko64rHaWcks=,iv:WrI3sy5KkOjHaJn4kHVRtqkTMoJ27eni0a7njN9LkdE=,tag:Kb/AneWQ6ilkKQsKneWUmg==,type:str] - clientId: ENC[AES256_GCM,data:qmSdmlY=,iv:m8I/9JJ+GUdHC+oLqQm8Bd03V0HDpotfCWMVFQUZkIg=,tag:4CI7n9zl+fuddvvCFy0WBg==,type:str] - clientSecret: ENC[AES256_GCM,data:p861qML6DA7dmJMct6HUTjp24lB55nK2XP4bz1XJRoA9jJ6pHK51ZO3AZTu6uPJzGbEPOlS9IseHXfFhrm+/qsOX8kBKd+KNxgpEei5DX9VrWPYXUVEUnAWChePhcLaNQmOGbDaYQL02jvhtxWyhU2y9acQK82XUJvZ4fphJXkY=,iv:m99GKBMRa9/NZ3CnNEhK6OETNkwvEWk5pgsMq0D1JHU=,tag:bXyUCw37TO+2TbfI2OCDlw==,type:str] - claimName: ENC[AES256_GCM,data:TTcLpDYT,iv:UB4CnJzBAhZoQebnw+lwnyU/VblUp9ZIJAvBm5tcFlQ=,tag:rpA9bUmAwrkjNwWmm/fKSw==,type:str] - redirectUri: ENC[AES256_GCM,data:Z0mo2BbMWBp/kfBaplkQzzFdktjTvLTB3c50yMU2IfqQVta5Q2vQ9UJeIB16JX0=,iv:avVDsu8I3es4SMMocVk+HZfTHC7hovmBsKREn+nl4ZI=,tag:Pr3s4NJyaI7ptm0hET4pfA==,type:str] - comment: ENC[AES256_GCM,data:gfJ47KgduHgkAo/Xybg0YSNOqXg=,iv:pihROTdckwv9cehzIyYyhjwpgMurBMx57NbpqMDKu7k=,tag:Bf7saFGs/Iq71x739Q+zDQ==,type:str] - claimPrefix: "" - scopes: ENC[AES256_GCM,data:Rql6kXzWAIkE5xcb6dwbNd2sa+mCGD2uuXkT,iv:9xccj1iHtkcpY2GbNoVdggrvX3sDO88M2dsoIVIhSPU=,tag:P/2ITVvGJhmwhmhPtT6Itg==,type:str] + enabled: ENC[AES256_GCM,data:pMUKTg==,iv:48MrCefuYkJr0o8VVMp/DZs1RLFl1o4wrlhK8qi8UyQ=,tag:7pwyOG+KioYFFJIwxa2POA==,type:bool] + configUrl: ENC[AES256_GCM,data:TpnTA8Elnk4qtG/I4Z+l4ZlBa/nGxYmv2MCO5nel7t9sTntDEdnjn23j6S9Si4Ro1MMtXsUqVNYkZ+DwIeBfsmPTCtGd9dq6naOTmSg95bXZRr2JmNSMc+A=,iv:KNmyCczBqbjvBpYiZ4NUNtDGTS1JYcQnuFLHVwXtba8=,tag:U4POHOx1GqTGGmh5IRr4YQ==,type:str] + clientId: ENC[AES256_GCM,data:PXPOadk=,iv:mWhj8fBjESJsHlPQngAlNgEafbMYXUMUX2uhfoVg9x4=,tag:WIipgnC48IsRPJduRxaekw==,type:str] + clientSecret: ENC[AES256_GCM,data:Ggt0mk4DRDGaCSdKyXKRDwyNCDcGURR6fXKPeeZc1xN2SvlF2p5EuX8Ff1d2nxDneM2LcZUyIw+HeCLlMGXsBTddhp6PZNSmiVEfBmBB/mHA9DORy2yNess8YsmIkkxWTjqXGrxN4hcVCLXpjHs7BPAkIfy7bxN8p2GR5aGMBSQ=,iv:FzwvxXFzrO8l8bT1h0XuHKW8Vh6jUsvh2nqXa9tyamQ=,tag:lLNdw6pnvzl916kVzqUhtA==,type:str] + claimName: ENC[AES256_GCM,data:10Fo+/Ic,iv:TeZUMkhW3+6m20SO2fb7bE9Un2wMcGo0zdLsKSgku8s=,tag:5V898yy4wgev9Z0+cA5JHA==,type:str] + redirectUri: ENC[AES256_GCM,data:bAZUX1ORaVCtdM2R8QHJCw1EBQd9qSz1Bnca+QoWZ6I67ORAAgNw0EzvWFc9UjQ=,iv:d4iYyl6pNRXBIcM9Vj1amG01iaj/rBz13n7KoZU+q+4=,tag:cymdAS/S3YsMO2sWNLu60A==,type:str] + comment: ENC[AES256_GCM,data:n6jK75om4fojBc1wFPBABXNymus=,iv:zcm2l1oJbAHNRCI+WCpyfZVGfxK9Qd4WSDcWKSkQzgo=,tag:zNl+VuPkoaYY8p+tmnYTPg==,type:str] + claimPrefix: "" + scopes: ENC[AES256_GCM,data:eze1hNDNN2krEKrANULY+98hemswJAMLJfMf,iv:GAL0OHV0sOUWo/ruSMXVN1XbdOLN9VRK/CfzNH3EXMA=,tag:saYqSjLXY2SRwNr3r3Vd0g==,type:str] sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBmbE5TNzEwY2l3VE5EcHU0 - cnNBazdHM0ZUd1ZJV0NMcDhPZUdrZVhuL1dNCkRHUzB5T1N3NFpUZ1JQalg0elA0 - K1J6SE9ML2svT2ovYjY3dnJnY20wMEEKLS0tIDZ1MldTanduV3FjaWNsSFdhdGRB - b2dkWUVReEtJSXFRSTVLVFJzVmU5Ym8KrIBGe2RNCHGBNDk9TIPTFL8ge1WukG/D - nzE+Gh0PiJrxJDzE/sWFtYgkzthMRBhDNjieZUmbgtpDULDe/9Q9ow== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-08-19T11:07:01Z" - mac: ENC[AES256_GCM,data:IU9IoU1gpwwnrEVLeMAC4B33lZcpCmoOectiavKBOuSnS5agEi5eR2V7TScO8MYpfOuLfM5dypAmL7I8CIcR0VESizUd4dbc34RUZ4VstjI6qiS43tbGgHxq1hAKaUbDCh1j743uK+bAe3NSG5LJfy1mfGIWEaOWRcu8elaJisk=,iv:6bDw+lViJEJjHd6P4s7shz6Y6lO6rR8YZ/2mSaf785c=,tag:7sZi+/JrjZhX4erCpMqhtg==,type:str] - pgp: [] - unencrypted_suffix: _unencrypted - version: 3.9.0 + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxMnFEcjBXNVhPV282VWww + RTdnZkozaXVuRTUzSlR2SEtLY0lwV0crYWl3CkRWbDg5OWNGSjlVRzlhaitXVWs1 + WURDaDF1NWs2Z2dYYU1rZkxrTk1jcEkKLS0tIHJXUG1tY3BkU2krMUdhUVFFd2s5 + b1U2QVFUdFBxZUk4TEluR2dPeUVDN1kKFG6rNR+1LuLhWK0UItX4v3ydBEMvEUnB + TLIM73c6DGeCIhEgLi+4FhsoQHXdtLBL9TyQYwJVg7f8rH+gZPc3MA== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2024-09-12T13:24:21Z" + mac: ENC[AES256_GCM,data:bSX8W6VSkguR+yPaUIloJeGtC6DIyh+vRFl+ITNUITEaqeeOA6kXBCpVtWIsHM+HWbO7Ev56bxjuqUNmQFsqiy7LDiuGXvAhj0BehjstScb54jWE/fdNGj67bBXOPSheLeqgk9B6Rwv9ygcgBNzTQj4lbxgxlyEXHTWMCyssvg8=,iv:nIuikxuVl+M4fAMx8TdF+ECI8WQHUaUTNGNWqUZD4+Y=,tag:fvlMmVSm51fLbKUSqruO1Q==,type:str] + pgp: [] + unencrypted_suffix: _unencrypted + version: 3.9.0 diff --git a/values/badhouseplants/secrets.zot.yaml b/values/badhouseplants/secrets.zot.yaml index bf9d084..68a4459 100644 --- a/values/badhouseplants/secrets.zot.yaml +++ b/values/badhouseplants/secrets.zot.yaml @@ -1,25 +1,25 @@ configFiles: - config.json: ENC[AES256_GCM,data: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,iv:ckg25YFoRwiCblA1WcPC3RL9duKOgCzW4BrofqdWVxY=,tag:YfovWhDDYeMN8nzARjjANg==,type:str] + config.json: ENC[AES256_GCM,data:xRgiu4gX417XF3vFqL70/I4+7EEnqkPXZrfY6X0GV4bYWzg0vrGrsRHvkkmiIMUNzPXN+bFOtPBTmuVDEbRCuOBK/JFuX/t0PMWXDeZ1bUmZKKdb2RWGhQCVZBEuvrFbNxrWrTVanYKHA7UIJSY0fTOzMTB0j4S7CLTAOjDzTqvqMwC1S0ikRuMvY7+oOX+jMrwcM92pXET71Yyjaqk6geziCOakl7jukhvwUjfFJdAvx2ZMyPUgRV1HrUlEppey1kyNIN0arFATk7C3v3xJcxc3AYq274mmtGKXiLq8Qzqglzp1hsbHbRaSGIE9HwwZW8yniK26C91IQBcLV3TJZ8hKoeSHnsdJqxvoRpyk3ty+UouJft9xdmpXn4B1osDDjvxoQwIF5I/fG2on720DnTacSAYDI7xWUN34se9YRijXxwYNLT5wJP5soaPjkcFNbyu8ASOh1OWfzGNYlvFQ0M5ZAD+h/cu2M3E9aArcSjy2B4TEdVdVDJD5N2TbLF7IW04lzfH/pBUGqfEvMWQ45cORu4eQmZ4nnfTjwowG6A2prqLcvbWPQf+h8/6R7UJbskL55HCfo9HSfQsddPsNWBLQlhnFlp6nihrxBjPkHoK7JiF4hxmbQqcvH89m/im1J/EAzjt1CEPM9na0KQgI4R0jaFrqIGNSIRiV5jb9zQOrcX27zvgaBnRPoVhQOsRpe1Gwu0BO0jm/EtIIfc9IGjXO4P+VBV9XsLMr8cU29uqrik2Ti2OFy0mG+gCF1TW1Okkmv4aJDXQZKKVF3YwS6HQ5BUcektK0/UPWYOFAdACZDf7YxhPPD/nXvMmkwKK6DWcpAcm6izDMXK7WFHyC1VgeVpmzbmZjqoH0OUuiUnlrMTFWvCuQkcb+YbRsNXCGzpjtRwwH8I+qTlG7fTkSHdE0AIMsFv/KdOszCXcBxSPMAHx3MNax9xQp8+fd+E9JdE3rH6RRdiondu5BQxRPXwHNpkWKYpKRvKTDxxCTsB9MlUkUoUMtLpkSaNub9mRfFnJHM0PjDq6OKpuJKF3zMG2vzBrcGHNdPQXHuCRmR6qbEtezOqowyyjhI2Q3eVntdd3dDYvzAiQmUVbPrwqDtar+TNFv49Ne+q671fcTzRLgsKtAki3Qpcf3ybrWbRXaSaYbM+nERPk7QsjElyH1+pOTldTbciqL1FJv75Pn09Psjb1ioA+UPH5tvkIP4YToLoGqKSJlp4Io4m50oGHm5wLFQN7WWCUvOHHAaDJeEkY47B35PMkE8oek4POtIYOQ/OHoDzoCgy8MXdNj2/YDzgfm1cbl/8lAkoMIxBVSWRr9OtQkyIyb5iZVyCRXkB8TM4p2b6WjeeG7EH3p7mdq9HNSKFSjSnjy3HDzwWKve5YcNlB/PcuQStMDIAuPppMZ4FJkMvgerb6uhqv4FxX/xAsg+VRt0nsD3FGkN7rws7yXbT6aLulU8BtOp244MKSSNfHWiDs7sa9ONPXnfNplNnEMc2+G9bGrnA0rAeOyj74ncaN0gy2D43Inj3iGaI6plB6VPRYOvxDW8xYn2qq9+MPcyOrOaG0IM8mg6Tuz04l3TaoFiDP7neDsaXuikinT+k7Oe8AcRIdwTXZbQBDohdR74t7CxCj/fcG3SfHxbDx8sPvruTRLNVnLnI4EYlBP+MrRJynTR1q8+QzLNd8q3TOwrdorz1JybZ/gR+eWu6f+v6nDjdYHtjJkHQfDWvU1OvdT7dlwjWzUq00vd539KkIstIbgLSAhzCt/XijUsZbyEs0aru0SyphPuLNsYqWmjRiCswJGXH5An5lafCxJQOHEwpQwqXgjVZej4t4NxZi/JI7hIMCiZSvlm0chDPId9hi8H2JsdehhmkVP4ywnc8MT6KhWghPIAaHqMTnvUrnFqVPFsDOk0OJzmQqNsscMAnnVevYC6m8RkQRC6lwdqeal94qGaibq/R7yROA9D43Cjg1SWaCxcZAKpL/vHemnLvbVtGeJdpIxnrNCp0kyESaXr2JevQ5k0qBC15E0Pd/lMO43tEAgkKH0k78BgL4oh4Nc6WkNq/qpmerkcRxI+46dsfvphcQBnOI1vqJpm//nDdiJ/6C10pQNS0jD9e5ms1AnQN262FxEr/2KYifU4UAqrf2RPJTB+p/br+RunQgUHFhnlHv+kRwKSG9PXpj/3iK/jRDsFRQh2tW5bdUVUaCJg0zeykR+etnZ8mOi7K/YaWNJC8vQFWSRzvwWbQo9uhV4cdHti9HRJFJ65dnHKkV8gXq+8/uEVEFV7/PFhReB5HSHnubkMuo4s34vtXg8lg4dnqTNaRjbBPIsKoKQ8HNLWuHwffvQG9LMTpL0eSnm1/E94dFrMqdMUAA5B40j97a7/LKHyaDH4RAus1Z8qyVj3zWldeLCCAUzwdvJl833tCglMY8rkzDzNpXY2+pyLj5cQhtoIfnHWzy1UYKh6H4fRvRT8SKg9ZJrKUl826y25h8qrpLx4yRs7UMmJj21hepEcWjDJf3sV0h22coPfdDCZ9d9KX4XXcjYUKSL1lyyxY6MPx6rATHxBdJjkzfcd8S+Qk2uS2u9LmgvssJGW/NjPQ==,iv:1wnPIhoigntgZy/zQ2gCYhoWbKcG7Kfychnm7HzPWJk=,tag:3/X1J+IHyKWgUItJLJBduA==,type:str] secretFiles: - htpasswd: ENC[AES256_GCM,data:DjBPh4ycj3Cr8pmjlnkOPsLrA6joney4vfkZMQJzq3+Bo8ERECyV3Ttc193c3DAfJCd9/Vj2HGDHBhxyqR/mT85NT2LuMueFl6XgdrvWIm76sOts1hmfmstGBUT3o9UOk7B3JXgRyXe2hqA312lIrBswncsy1RQOJvUQyhEOcD/Li6R3CQFPFQ==,iv:C/F3vg9dcmS1uSlJkbOkOoj04ZvIVuHJ/IkIqGkYUgs=,tag:I/c8V9DF+xiuHYdnAyl3KQ==,type:str] -authHeader: ENC[AES256_GCM,data:xiqhgK8yQUtpOBUMDVWD7JxAi5xjz4HDsV4wveMBoDEp60lrZugT+23i9m4cifdl,iv:73GsdwwZHkhZvbaGQhKoHykLvvVwYrIuZSKJMWOUd8Q=,tag:3g8H1IACoqmC7mndixb+7Q==,type:str] + htpasswd: ENC[AES256_GCM,data:D+6dHsMz58WNiBWoJyBFrHYBenh46LpAmUrNOdiAjtV18JaZsj15mCJtEJ7WDqiY3gepiE6ep09+BJtkHxbcNdBhtQ1TUGjqcYYd4Ci5oXs1/cCnvh7VeAwX20DcfiiTZb2jQziyERmOFNEIp8k3ZXRF0iioPkasj+JBkwveb4ETs7tCgHj3fA==,iv:FiWBUEimPzowyAaK/sG1jXvQXYwtUW3V1hzHy6jqQqM=,tag:S8PWr4+JVkmalQ+RW4L9gQ==,type:str] +authHeader: ENC[AES256_GCM,data:BJPeQa3pGY0eyDV8j1JN+XAFvM3aVWPQlKMEe6tjJNOB0VMd6/THiuP5J9O0p9RB,iv:ezLSsmU9z2ck2i+86J00JmaxwEVgbzIVJernN9wGRmE=,tag:+o4D+iRLuK8z2iywirruJw==,type:str] sops: - kms: [] - gcp_kms: [] - azure_kv: [] - hc_vault: [] - age: - - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvc2NjZ0J3eWljdzlqSVM1 - N2pqQ1pXVmJxTjZzMlFMdWgrYS9OVVFFWkVJCnpnaW44Vmo5VGUvSjFRWmFlQ0FX - aEpQajVJNzdQeXJ2bzFBQkkycjFYeVkKLS0tIFh5SGxEbW93ckc1WnJydzFWcVBR - RjZMZHEwbHR2bzZJZEFqeWRlZXlFTHcK4Z0WwYIIdBZRt2RTlSbRHER9BJNolHLV - 0EUjwcEnFQExF/uh2FTeoVudBhmlyfVjYvlI56QoeculVHPSS4YIhw== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-08-18T20:53:28Z" - mac: ENC[AES256_GCM,data:RTUkxdfFLcqSHUjNTTzGHYtZubydqm+9cZmW6gXj2PIn5I0GXQoJVwWT6sZFbARrDpaMyANLBYYeh2P40i9M1GKqz1HnnelvMDEqN036e/5dtSRclPhQokDxtRMZAqM2tGDG0E3UVzMo0I2hQL3BJiGSkdNjz+rRXlJCOnrtUyc=,iv:jUhrVQKT2YVn3K9sY13M8ymEHnQahs0gHe0IOEbdCw8=,tag:jEcelDJi8HQdLS7/fUHq/g==,type:str] - pgp: [] - unencrypted_suffix: _unencrypted - version: 3.9.0 + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: + - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBL3JQUXBXaGhLMDdzQlB4 + SU4rSFgvZEEzTlhOR1c0eHRiVm5lWDk3OHd3CkcrNGdDVkZsMThNMVRNck42dFBN + MW5HR2gwK2MrSHdRdUs2czVZNHk4bDQKLS0tIGdZNVUwMnFUdkpGWEt2dTlpSVNr + amdiN29wUTRld2RTMThRcWI4UzY0R28KiJL2RrJC+HCZwHgLctUulggzInOKDTcP + TKvEBR1MIxL0lA4gA4QoBS4PQLhvE+VgbTg7m/QjbLOiWUJUiVz3ew== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2024-09-12T19:46:07Z" + mac: ENC[AES256_GCM,data:ov8gTJtpQzoTWhQV9XzWr1chJaHtX+kp2Cjt4ovSSc9UNCJHIiKQkUi1ljm4UcQ+a2ongPrjgPxXL3tsnLSIYndKIoeKZh4AEVwJhtrJ7+hR31frEgqOTfkGNWgoR0n6NUG+47fIGzud7AeEpefiqNMzo9/Lik37xYjDARY/nFU=,iv:c/585bw7phSceiW/ulXcs9wc43ZZP2ttSpkA4Gz8NeY=,tag:Wz4FWaKzVrrzfshSq+Z/jw==,type:str] + pgp: [] + unencrypted_suffix: _unencrypted + version: 3.9.0 diff --git a/values/badhouseplants/values.minio.yaml b/values/badhouseplants/values.minio.yaml index dba9ea2..1f57572 100644 --- a/values/badhouseplants/values.minio.yaml +++ b/values/badhouseplants/values.minio.yaml @@ -103,6 +103,10 @@ buckets: policy: download purge: false versioning: false + - name: zot + policy: none + purge: false + versioning: false metrics: serviceMonitor: enabled: false @@ -153,3 +157,10 @@ policies: - 'arn:aws:s3:::sharing/*' actions: - "s3:*" + - name: zot + statements: + - resources: + - 'arn:aws:s3:::zot' + - 'arn:aws:s3:::zot/*' + actions: + - 's3:*' diff --git a/values/badhouseplants/values.zot.yaml b/values/badhouseplants/values.zot.yaml index 65e0d65..a993076 100644 --- a/values/badhouseplants/values.zot.yaml +++ b/values/badhouseplants/values.zot.yaml @@ -1,3 +1,5 @@ +image: + repository: ghcr.io/project-zot/zot ingress: enabled: true className: traefik @@ -17,12 +19,12 @@ ingress: - zot.badhouseplants.net service: type: ClusterIP -persistence: true +persistence: false pvc: - create: true - accessMode: "ReadWriteMany" - storage: 5Gi - storageClassName: ceph-filesystem + create: false + # accessMode: "ReadWriteMany" + # storage: 5Gi + # storageClassName: ceph-filesystem mountConfig: true mountSecret: true strategy: