Migrate to the new cluster

installations/applications/helmfile.yaml

@@ -105,7 +105,7 @@ releases:
     chart: grafana/grafana
     namespace: applications
     version: 8.5.1
-    installed: false
+    installed: true
     inherit:
       - template: default-env-values
       - template: default-env-secrets

installations/monitoring/helmfile.yaml

@@ -9,8 +9,7 @@ repositories:
 releases:
   - name: prometheus
     chart: prometheus-community/kube-prometheus-stack
-    namespace: monitoring
+    namespace: observability
-    installed: false
     version: 62.7.0
     inherit:
       - template: default-env-values

installations/platform/helmfile.yaml

@@ -16,6 +16,8 @@ repositories:
     url: https://charts.goauthentik.io/
   - name: minio-standalone
     url: https://charts.min.io/
+  - name: kyverno
+    url: https://kyverno.github.io/kyverno/
 releases:
   - name: argocd
     chart: argo/argo-cd
@@ -64,6 +66,8 @@ releases:
     version: 2024.8.3
     namespace: platform
     createNamespace: false
+    needs:
+      - platform/db-operator
     inherit:
       - template: default-env-values
       - template: default-env-secrets
@@ -75,3 +79,24 @@ releases:
     inherit:
       - template: default-env-values
       - template: default-env-secrets
+  - name: kyverno
+    chart: kyverno/kyverno
+    namespace: kyverno
+    labels:
+      bootstrap: true
+    version: 3.2.6
+  - name: kyverno-policies
+    chart: kyverno/kyverno-policies
+    namespace: kyverno
+    labels:
+      bootstrap: true
+    version: 3.2.5
+    needs:
+      - kyverno/kyverno
+  - name: custom-kyverno-policies
+    chart: ../../kustomizations/kyverno/
+    namespace: kyverno
+    labels:
+      bootstrap: true
+    needs:
+      - kyverno/kyverno

installations/system/helmfile.yaml

@@ -22,6 +22,8 @@ repositories:
     url: https://piraeus.io/helm-charts/
   - name: vmware-tanzu
     url: https://vmware-tanzu.github.io/helm-charts/
+  - name: openebs
+    url: https://openebs.github.io/openebs
 releases:
   - name: namespaces
     chart: '{{ requiredEnv "PWD" }}/charts/namespaces/chart'
@@ -120,3 +122,11 @@ releases:
       - template: default-env-values
       - template: default-env-secrets
       - template: crd-management-hook
+  - name: openebs
+    chart: openebs/openebs
+    namespace: kube-system
+    version: 4.1.1
+    needs:
+      - kube-system/cilium
+    inherit:
+      - template: default-env-values

kustomizations/kyverno/pvc-patch.yaml

@@ -0,0 +1,40 @@
+apiVersion: kyverno.io/v1
+kind: ClusterPolicy
+metadata:
+  name: replace-storage-class-by-openebs
+spec:
+  rules:
+    - name: replace-storage-class
+      match:
+        any:
+          - resources:
+              kinds:
+                - PersistentVolumeClaim
+      mutate:
+        patchStrategicMerge:
+          metadata:
+            annotations:
+              volume.beta.kubernetes.io/storage-class: openebs-hostpath
+          spec:
+            storageClassName: openebs-hostpath
+            accessModes:
+              - ReadWriteOnce
+    - name: remove-unwanted-annotations
+      match:
+        any:
+          - resources:
+              kinds:
+                - PersistentVolumeClaim
+              namespaces:
+                - games
+      mutate:
+        patchesJson6902: |-
+          - path: "/metadata/annotations/volume.beta.kubernetes.io~1storage-class"
+            op: replace
+            value: openebs-hostpath
+          - path: "/metadata/annotations/volume.beta.kubernetes.io~1storage-provisioner"
+            op: replace
+            value: openebs.io/local
+          - path: "/metadata/annotations/volume.kubernetes.io~1storage-provisioner"
+            op: replace
+            value: openebs.io/local

values/badhouseplants/secrets.gitea.yaml

@@ -1,31 +1,31 @@
 gitea:
   admin:
-    username: ENC[AES256_GCM,data:v3sgQA1FXqs=,iv:TXpcQIaJfhHyjBRkVSlwzUVUCkhbFzPvyiUXRrc89NE=,tag:JZ67LtzNrI1BpwvWLueJHA==,type:str]
+    username: ENC[AES256_GCM,data:hn9KbBrp6Ak=,iv:wg7E83jsBkxvBdKWbObizqWtfI1Dy1KnwAEZvnY1anc=,tag:UuX2qt/AVQpaZu251J4EGg==,type:str]
-    password: ENC[AES256_GCM,data:YZrXQ5yail+jmNQOGz50uT+icTE=,iv:eoGozzZ89DJqjt0j4cuf+2UmHnT+VP8vDY0ClSmiqfI=,tag:y8O5wJqiChNWV+5BbFhdCg==,type:str]
+    password: ENC[AES256_GCM,data:ETNIrZsYXVtMZh9/sU+RAV8zzK8=,iv:tOzJVOeEIJDfMIrbhQVOyHlPQH7pSJdrcQ5oeq1Hxtg=,tag:hILdhhYmix4O53ZdF8A+gg==,type:str]
   config:
     mailer:
-      PASSWD: ENC[AES256_GCM,data:QxCpONzUd9h/qS9H77zJMsAPUp3un5Yl4+6+l3rPajRuRvjaRtcTXAxLnxpxEgGLUFpLgIPryWD3eMKT,iv:5iyEN1vUrxmgEN803fd6Q63zxnhmmGa4aj/TRrJNTwA=,tag:63SaHKG/K+PQ5grwv+zN8A==,type:str]
+      PASSWD: ENC[AES256_GCM,data:/wnVyhS6pBUJOE9PS39ZW+carVqn+WG+Sw==,iv:xraey6+BICLdsX81JLjFDGikj7ILqu40HJOY43nGBeg=,tag:ALkgbnK0QDVa1ZTHujE0fg==,type:str]
     database:
-      PASSWD: ENC[AES256_GCM,data:qH2pVwmY1o7pVFMyl9tBGW02Psw=,iv:/XkFFeCiYWE3dCoYj63rIA0+V3lvJWZUvMyO6NkAfSM=,tag:UWIzPp9MlYRUHbBRRJrTnA==,type:str]
+      PASSWD: ENC[AES256_GCM,data:VbWIJV60OURufOh03zt2noSxb04=,iv:bHjeClvdB10byx90pFJVec3MywRYnTPpm8nfC51S88M=,tag:mfI4dNBZZtunMPZaVF8+LQ==,type:str]
     session:
-      PROVIDER_CONFIG: ENC[AES256_GCM,data:lI3Mg6ZljleZ2IdivcSOrvLDMUdhbHTlRN2viIwyE+EHpHOk+0Onu2AkOTgnspGhvXkmpX0AAynUCOEmkI1k0eST4XdC4a+vp895Hu/6+UgODN2UCMutjkVg0kgRm6GcpI9i/FnoaHp4VR09nT9k13dqXCs7VhEk,iv:SMG084+MzKSxkgJqASNrkDVcVjw9VEjp0vsYyziobtY=,tag:kM6i/8LUvzd+3K5iXmzdag==,type:str]
+      PROVIDER_CONFIG: ENC[AES256_GCM,data:mtJYLatUA2VwE5MAX3KBceTS2eJG9mWlNAoHmsraPAcm9BeqpNf2OhnefnFiY6af9bSwC8/C/uXnOIBC12PuF5+DCp6ce8OsneaEsZKBVvurGc3fmCg2zDo/7VCI3EQ1BUZcAQIZl8cMTNMRfPhzwMug2LHBhYgS,iv:khZU/ENruxI0lwqCKz6VcdGFPok04/iyDT639OB3A04=,tag:ks6Y+ddsgXNZAW+XuYxLfA==,type:str]
     cache:
-      HOST: ENC[AES256_GCM,data:R9V0k6ecZgb3saCeF3VYSR4zGv67ikdwckembcmU6f9o9M7GVivOV/nMVrW9dN3RKOVsyznJAYiFKtlPYD4JxTkjDCIbtK04innCdUmMqi6ziXeb1RQq9syefVOHF0GRi/sbWfruNY39dwqbH7Ol+Ot9oDMjDLJ6,iv:fCVXeLYZSV5x7E8TpX5XNShagZHfUSpF/rewvX2BVqs=,tag:bcLJh4QSSw+QkGIYmOSC3Q==,type:str]
+      HOST: ENC[AES256_GCM,data:5E42e/2jSYt1qbDiU2f07isGJaKGfaps27y2+bVe/1DBhmVytVZNjidqyB2qS4y7Gg/XLbRKC7Dx2tbG0YE37unXOx3sHEHPQEBreSutXapEu3mcHFmhsIkSe7fatAntPZPdMkNZMm3I+AqJQSBH1FsMV7vlFh2a,iv:wuifOOnMIlyWygn8K/7eUH6NrhRkDWW85Ha9KuJWuJ4=,tag:bRX/HU74wfWKdH/MUYLuMQ==,type:str]
     queue:
-      CONN_STR: ENC[AES256_GCM,data:NuXv8GwzLccYAyLL9e02PKCWoUSQ4gYJg6n5VI64eQ6nQiKgYN6kjvQYPkK/zIrHwv4pnsiI+IpUHiQhIsZyMQW8SibBO38ZfEUwzJBpp9VSjbGYuqwK6srcsk+H4F5XZhI2tsAXchywf8bhC90dtX+sneMAYdcv,iv:X5RrpwG38M/x0+c/BFQc9dhiJPGeYngvHL/wsDZZbQA=,tag:SN+6f6Ld+98tDNaI8Sc5yQ==,type:str]
+      CONN_STR: ENC[AES256_GCM,data:xrTWrgen3wnSKplk3r9BdXTd/wUY+QyphpKdlu5IaEGwS5vbUCaI3+JOg1GFFyeVO0Uaj00c1taIu4q9+ul6YMYaouMPSSJ9tcftzNqgA3ZaDeUzYnU/rQTg8SM6bxGYcLQMtN9zhO+BsmKJmC04J5ST2qu/OEqb,iv:EUmeVGQDBLVG3dwTsA0HQnliryWTmukFXdkAQkS7Whk=,tag:Ep7YVUJiGt3dHZHoG8MS6w==,type:str]
   oauth:
-    - name: ENC[AES256_GCM,data:q+bXBBH+,iv:tEGL4Hgp1a7CVZ0WNfPylGM6llDuU+gFwmGrZGyBihA=,tag:j8igdV+mTxuHP9rjeixkDg==,type:str]
+    - name: ENC[AES256_GCM,data:80trOTjt,iv:XZ7RlcsdueY43Q6FUM+LAZ0j94VQw9DU2k8KqLl3uMI=,tag:7nGXu3H4g/gBaJi2wyP43A==,type:str]
-      provider: ENC[AES256_GCM,data:Xb7vAdyq,iv:49z26uy6QRo5y/lSXKvcfywLK0DuTFb63YVxYA1wobE=,tag:0ynquRoj0Bil8FYg6wURVg==,type:str]
+      provider: ENC[AES256_GCM,data:jVEvNRAK,iv:0TuV5ZfSSP6ENNuWVtYDWWCmUkQbNy0fR59j1nywQGs=,tag:ZOqB7tf9xEeBSQSODWAq4Q==,type:str]
-      key: ENC[AES256_GCM,data:BPgxRsbe6BAQlvprJf3q8B+ddQY=,iv:QrBEnvkTwKmf1/7TCGDPIADPhhHfugCzNRwSJJe/nvA=,tag:n3laygkDMAHg8jFfplRPSw==,type:str]
+      key: ENC[AES256_GCM,data:2Xu5PXhUWnWulSyR+a6oIr0YD0s=,iv:2+UFaOtd6WIOADn6/39TzHhNyTi3JJrYXQqrY57Qurw=,tag:K7vBwFGBM+77SVmU92Jhbw==,type:str]
-      secret: ENC[AES256_GCM,data:wXLN+GYGCHhyQqQYGso6b1U1BmOBHSkXR61wyoEEHIMYRnGmDCA1ng==,iv:DEXqNGRLSU+EUNt1x9dqEMRc8nsGg+TjN1c6wyQcTQQ=,tag:uX/3TWYSYKX3k9BJSIf+TA==,type:str]
+      secret: ENC[AES256_GCM,data:HEZNgZ6kQn5yOPUGyww+/rfYIGgB/vj9Yfsn3GFSUs31ZNe68G1huA==,iv:07hfyhw+KD2aR976IpWfAwjMXZC4uuz6hrXzOCRxIGw=,tag:WB57de5jqrxaSkyyc2DC+g==,type:str]
-    - name: ENC[AES256_GCM,data:yE+puM05oI/1,iv:Ups4cBHl/Lmj8RSPW5sh2A9xGIxHOazJnTpyFluhfhU=,tag:xLMiY0p8KQaBGFrog7mzXQ==,type:str]
+    - name: ENC[AES256_GCM,data:sIdCMyXgLknP,iv:CiptgMsOQcgrCA4vUEWlmwAL8xrXW+lVN16zJ/TnrUQ=,tag:3OYYQVgGN+UYSGkYalQEJA==,type:str]
-      provider: ENC[AES256_GCM,data:r9qYI/J613FmkrFRDA==,iv:EUxmXmg4T7nRFVa4HZAxRfb+90fsSKcns/suu6tQC8E=,tag:HNMAwWigse/50YTEg429wg==,type:str]
+      provider: ENC[AES256_GCM,data:abL1jCQ/SnikvaFy7Q==,iv:nqabj6UltKcauQ+PrYP7Ok2T0PrPbwlGrHwJKVHJyBY=,tag:Q+3hwSTPeWkIIalDFswJtQ==,type:str]
-      skip_local_2fa: ENC[AES256_GCM,data:jFIZ8Q==,iv:k7pWtnnmBUy/4yE+eJ6C6iwoK+jGHNt0e+3ekUf5KSo=,tag:iCgt7V4mheagXBkZwR0S1w==,type:str]
+      skip_local_2fa: ENC[AES256_GCM,data:hQT9qw==,iv:qsQlx2BrTpg5kmVspZsGb1zAiNMyWyX25EJGHWwLyTw=,tag:x1OW3mNVdSPPKfjat9JDBA==,type:str]
-      key: ENC[AES256_GCM,data:KSPkJbE=,iv:pnuGLWLqYPX13XoKEPIXQcPbLpK00CJG4gJIgKvgDiA=,tag:GD3kbHU1IuslQ8nkSiQmKQ==,type:str]
+      key: ENC[AES256_GCM,data:pgFH36E=,iv:cU6aHL2F71+ciA55UgiHm7oPDtSo+MUT1Pqg6igFZ1k=,tag:7BXwd/XUdYpwvVhBXinJug==,type:str]
-      secret: ENC[AES256_GCM,data:N/GQgcpaFgUSq2zPSciWiqm/3l8aDmpzSqXL0NEpDNe9eB7FBvInljU4/HOCBoxd09Xv+6UDr4RzP3fZpyLkQVGHEUx2MLEDobmEWbCXsXNhV/92GN9wGe+gF9w4jPlieLXIGucn1ELwnPD13nnb6aFH2BJjeWb93MxSNqOSjfk=,iv:5W9YNbJI/8o/CeDGwLo7lpLoS294cwMgNK2yCRdaGCs=,tag:rLL3ENb9/Kei4ubrlMIf1Q==,type:str]
+      secret: ENC[AES256_GCM,data:uraGme2NLEfg0FjXEVNtElD8g6MrZx10DFlsny3kOSQthE3Nie/RMLuF3ufBZcFaPoSjKX8Tu6BOCheEzEm/E2ghU32TmfAxSJVNMwupT4mHviop+mNSnxNt41DRDv2fM8f2QDFWEpH9t2c4uepR+aGfzt58KJ70/RS03j/st50=,iv:8cr8PaEk3sId+6hCgtf2bihUYqtBszIsy1bFpnB1eBY=,tag:MnrVoVuKdYPmc53o6D27XQ==,type:str]
-      autoDiscoverUrl: ENC[AES256_GCM,data:l2fkf+wJU52wLG4Ea6+xFRWZoE4WBg3UIT8cOOb9chjzcWWeG6cxKiiI4feevzuUUkIDFEGG04bFu6Gh/tgf/ERiMYlXNVMXF6TDA4gLylZ/InQa6+ra1lM=,iv:4WFqWodHQFxr3lbLvJlmrH0CRjBTHIRGIybw3YyRw84=,tag:T3v9P7l0eEXO5qnp0Kzebw==,type:str]
+      autoDiscoverUrl: ENC[AES256_GCM,data:1ns+6vCF/3qASFR14KYX1su/YI4IAREjRSeG8ld7RmlvFeYu9V6uiHHLiSWPVcj4P9Gh82sqdiFh2YX/TcoVY/mVGopIPreUJNlrlr2hcofn2oYwILj6VBk=,iv:qhV0H9Kk/lMfgv4YvAv4hi1aX4DUN9SSUldJ58bWDfE=,tag:zzdxPxYHkOQWKqGAP7HO5g==,type:str]
-      iconUrl: ENC[AES256_GCM,data:JcyeyiW/gYi8I30CafwIXD028ChoTHSUAR4P94vU8KOAQ63aybc/lCBpZ2MDNelrJI7gYQX2B5ST2My3FuaySvN2ac3PGA==,iv:90fkZSOWOw5x4gPHduw8kHQCbYE65DrTVp8V1jT0h1g=,tag:U5d0k3XNl5k5n0L93nA8zg==,type:str]
+      iconUrl: ENC[AES256_GCM,data:8Ez2F8q7SbDHqEioLLNjwApuFyL1HvuxsdODVmVRet8XAef+gZcXS6s8rQgSbRaiI8aEKItc8or76Rd7VqS3sl+0qU2wPQ==,iv:YE1xtNurA+sNLQaiSQdkz1u0eWMomrI6L3SBVSzNJng=,tag:9CIDfwYc7h7i/iHWmp5UKA==,type:str]
-      scopes: ENC[AES256_GCM,data:PmCest22VSJidBXnLw==,iv:RQ1xHmw9ohbeq/C4OcQiB8jlW5NZKZHHyMVS7ihlT1A=,tag:pqZLf2NYBS8Xljg+f+vNpA==,type:str]
+      scopes: ENC[AES256_GCM,data:1//BjLyrku25qJqzbg==,iv:7wy1jDCFRBH78oe7KnbAtxFYQvoaBBCzAUHGOCkyJMA=,tag:lT64XKj/rHiKfCIvyrOR0w==,type:str]
 sops:
   kms: []
   gcp_kms: []
@@ -35,14 +35,14 @@ sops:
     - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
       enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4VWhaYTFiOGs2NHF5a2lT
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dWNmQjdITllRWHJCM3dv
-        Q0NjR2ZOMkdFZTVLUzlmdGo0cHhmbThJY1RzCmFHQzN0eDYrSUt1ZDUzTkZVYTBl
+        Z2lIb1lzcFZ6eWxiVkxKcWxBL3kyYjNaRVZvCjhCVXZTaW9uaE5pMExFR2w4RGpm
-        YzBid2VIQWxyMERQUjk2VlFFajQ5TFkKLS0tIDA4bzlwbWs5d3UraXBXaElCWUNT
+        a3ZPcGFXWmRlQ1ZUY1FITlNkR0NzY00KLS0tIHRKYnZCajN4cFJLY0EwNUVhbTBw
-        SDhaYlVhaExiUkVoUSs0MjBrK21LNGsKGjZPAjO8PU3s/8eYFD6/hbinjj4yAU8M
+        TUh6RTJWQXJsbkFCNERmYWJzL1VQancK+MaDoG78tswXqtQY2MYYtsAAgcVvQqGh
-        W76hvpASbqg3AoQtSjgNeJfCgfntFdghFy66ELbCCQtO/XB0fIh1TA==
+        4i5OmTztBp3rpAM9DiT7TASvo1vz3UEak7ApQdaM2PpteiX8VZhIQg==
         -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-09-13T04:19:53Z"
+  lastmodified: "2024-09-27T20:08:06Z"
-  mac: ENC[AES256_GCM,data:FGVQm5BxRm046oxnEc4kusR/RsUPeI1wbqyhhsq/VErv/3n4jfww19ixzHpCye+8PzQQNAfWxNyvkwhpArKLFbFcZVsyITChZK7BaHwLmM/IBzN5FwW27gtNVfIU7DCUM2plK6Nk19Ssj7lkr6Q3JWhjKb9oFHr9YbCTqJzjYNU=,iv:l0CWvvWjPY1bh0E7zfCBM6IDJZu3N7vEHk/Eu7iU7tc=,tag:8ziHcJV5kSLtqrRxnvvIjA==,type:str]
+  mac: ENC[AES256_GCM,data:Gun7zcN1//UmvPMTi9Fd1gDYIO0HL10n1LhsdFdp6/CGBcjVMBM0Hvpq2VqEN37ipoeENEiKn/KOWkJpbDwz2HE9hEbQ6gSZLKILi/vY2hn76Uc2m6nAVRjSMfCryE7IVA4Yc2dPwhRAjn6ABf1gzWoh02ULjahCNgJ+K7jJJjg=,iv:3JuoL7rpOOhgunAOdhaS7L0X8qG7X3qNGQWQkqcPhu8=,tag:Q5BEt7XDZmY4sNG6uk8QAA==,type:str]
   pgp: []
   unencrypted_suffix: _unencrypted
   version: 3.9.0

values/badhouseplants/secrets.minio.yaml

@@ -1,24 +1,24 @@
-rootPassword: ENC[AES256_GCM,data:SADfxbBdM62niS1Xdlol1L1ogOg=,iv:RBjSqMLYKWkJmt2fuiTnZaPXIGULQUGHR1dmfOJLlvM=,tag:gRjCyfLOeGWlVlt3ihbW2g==,type:str]
+rootPassword: ENC[AES256_GCM,data:Sj9QUj4bQqZz9ZRSHulhHRcYWVE=,iv:AFGPrsiRA6gs075gjmWLg8qb1pz217Sy7nLQHgKy4GM=,tag:coHd4NZ0p37lYcWh7Npt/w==,type:str]
 users:
-  - accessKey: ENC[AES256_GCM,data:WZCEHgof+sE=,iv:NsRvxQhf4L3e9IlMLq9m/aW1vMV9jFh5e6Novx20kJc=,tag:qNdj1jDkyjxM8EMsWGHbYw==,type:str]
+  - accessKey: ENC[AES256_GCM,data:KHXcm8I9Cpo=,iv:DU/nva4K5E4IkZz7N7xfESZncKnQbof6Sv8rJbTwVRc=,tag:4WfJkd4t0eqkr4/CIEXl6w==,type:str]
-    secretKey: ENC[AES256_GCM,data:ifkorAMgFXxNm43OPLdoAztPTw==,iv:AgkPkvfLHm8mDHsMfpbmCLa5XT8I53UNcb6ry/pRitU=,tag:HRfy5RGLG+eAKkf35a8oJg==,type:str]
+    secretKey: ENC[AES256_GCM,data:cRGWP6nIZGYws9AUgAkwmoET/g==,iv:Qu1c6xLzFpDRWdUM/XIjIkO6KknIOeSRHb/XEm44+rc=,tag:+NqHXmZNLFtCh/L9/rW+rg==,type:str]
-    policy: ENC[AES256_GCM,data:PKbIEEOWLtE=,iv:DY2kldt933RElyoZaysMqxtAdjq+bHlAwIeZZzTOFcc=,tag:DmCi9YIfuwiqixgsav9NBw==,type:str]
+    policy: ENC[AES256_GCM,data:7Ptdd4qFo90=,iv:Qx3Ynm0Vjl+YPVAUNtXUpURf9n+PPkM34dBewMW4zss=,tag:sIgimJx3u0xcikskVr1L1g==,type:str]
-  - accessKey: ENC[AES256_GCM,data:aM3o,iv:71uE60cLbplVr5MPBrnep9LeO8Xe2QbZW91FzYJZ1oM=,tag:+oms50UJM/qsT5fcrAimgw==,type:str]
+  - accessKey: ENC[AES256_GCM,data:nxWz,iv:l+kT7y9qtzrASOaIIcCoKbHaCdYnn4RnG4J+sqtCONA=,tag:wK6RatUPQMnrqML2bSJKhg==,type:str]
-    secretKey: ENC[AES256_GCM,data:eskXQ+nI+yN+BtNmABMEQ4wu+xZU4jgSmA==,iv:9wRgKpxO8Re3fRc9pDQ9j2VXBx4RVgNbdOqay+ByY98=,tag:hCWaWoWAGZb5NPvRS9HydQ==,type:str]
+    secretKey: ENC[AES256_GCM,data:6fATAB+2lypheqVMjgsDVyPiYTHoPeI2Uw==,iv:9Rd61bueMrsW/XJ7F0oK5LIvbVegaZLBSiABP5q01EY=,tag:WfwkhxuAb+irrPjQdAMQMA==,type:str]
-    policy: ENC[AES256_GCM,data:Bsgg,iv:8StVF24kd5F6NNkYNVFBPU7I1QxS2J0uUoS8XwF9Dzg=,tag:N4DGgnIaZZfCzP0tbycTdQ==,type:str]
+    policy: ENC[AES256_GCM,data:Iwu/,iv:+FhFi0JSGGH4sqEELv2xAr3uZnRIS9gljw0OJQR8HUA=,tag:iscBtaxpr/QC7CNXHSfqkw==,type:str]
-  - accessKey: ENC[AES256_GCM,data:TXc+nAG3QbT+,iv:RueCXZIsJLQb3T7iZkSrAJtX0NH+335YeSxVMLIvLpM=,tag:A7UEw4qJHES5GUGpuSiRIA==,type:str]
+  - accessKey: ENC[AES256_GCM,data:DY9K2kx+xDHo,iv:NUVRo7n+Arivki/pC/CM5C48mqX2Ho+MrlB0z2NJffw=,tag:UoyAyXl5Jf1w3z9kycJIWQ==,type:str]
-    secretKey: ENC[AES256_GCM,data:z1zpY//KxAC5J1jI5JeSF47AmAY=,iv:ASItFJxmrxvpSxCU+kwMRieOvExR4ZA+f0RZtVF/6mQ=,tag:xSA1XaehFn/x4UnIXQPAGQ==,type:str]
+    secretKey: ENC[AES256_GCM,data:xnKEaYxgSTMsPAT8vU2bs2lX0lY=,iv:QXDB+2Uneq6XXaKeIY17pl8rPuej5pGux1VA8qVhYOQ=,tag:c4jFeNf9kzQONISOaZ+Jow==,type:str]
-    policy: ENC[AES256_GCM,data:tcH14hh3suBL,iv:9ZadSBkUJtPHYL6VduNVoXQ+u3UUy3h3aQjZTAPPSJ8=,tag:QwmAbqRDBALys7xFBjuf1g==,type:str]
+    policy: ENC[AES256_GCM,data:acfH2yD6RDmt,iv:3W80PJaAZHNIPlt3VutN5HNAzF+TEZw7F+MTBi60A0w=,tag:Kl+lObipEDxwgeYJQpLomQ==,type:str]
 oidc:
-  enabled: ENC[AES256_GCM,data:fb3rHQ==,iv:JZxKacHRfAPtHLdjKcI3NOTyeLW2lSUMEOsV6EGICQs=,tag:lP2zDO746UaPHUGoTrfqvA==,type:bool]
+  enabled: ENC[AES256_GCM,data:ZFm6qw==,iv:0PW79J4WHM4/aOujVOQ4pBbOTNFlPnSLyOuYq6mW7NM=,tag:iDu+djacM/hF7XftA9oZUw==,type:bool]
-  configUrl: ENC[AES256_GCM,data:12njGoK0zjSuYCXRkP2vz0ysPzeNoJ6uFWS7hv7mqf9gSfTEZXcC9BKFCnfzeHh+/naJZsWMfgDrqVeNbdTGA0w1qwCwYSy8QXo1b54WeN34QmwlmJCXdRU=,iv:jtCBSWF+mjbwdeNd7nSkmZHza6MZAVZmt62lAnOf6H8=,tag:X89Dzt6RtlhYdtycaN8sLA==,type:str]
+  configUrl: ENC[AES256_GCM,data:hi2fDfbiDYViKHsdRocRfZ/I8NNACHUcjcbdGHNulUEV9SfnJDEkl7XqzGDw43DMOCqMwiaTqtLbc2dciaO2sNz51o4Snv/pw30/HOpws6quLD2xTYg01Wk=,iv:NVoS1cATyNV0Wmx5PAo3f9UTuS4rx13tticp6A5q02s=,tag:KxbPIlglfDbcZuiZIBb/+g==,type:str]
-  clientId: ENC[AES256_GCM,data:2geq8zo=,iv:/IUg+4RA1W0F3J1Y+P/eteEeSO+9zbX4Se73h+JS9rQ=,tag:EnCidLx/uoluc76+wkYApw==,type:str]
+  clientId: ENC[AES256_GCM,data:g7vcvIc=,iv:7uo+/lJ1F4nV1e0KdmZxaoPBf0hY4z6xgGVOEowF998=,tag:zJmSCtdskALb1Vm8D3BbCA==,type:str]
-  clientSecret: ENC[AES256_GCM,data:A1pzBwSZ0it/LMiwb0/8yMtYG/2a7aj0+D2l64H5pjqYGg4UBfDOGzba3b7YYCkzS6+zLmCRfN5npi/gTi7K2YULEfLSY1CVxhR85Iuc8Ck3raekNwWWIMl+vyWvlDeGYe29QNF3YHcV2sfmXbKrEm13kFGS1JNCVpSh4tGMOqU=,iv:oJgRA3ooTJN9+9bjGBv2H/uDFp9BA4sUh+UtGFqOoZM=,tag:H/NTVou4OYVVsj7lE4lofw==,type:str]
+  clientSecret: ENC[AES256_GCM,data:yzbQS6EwjTlpfOKMr3G/gmkCz+LgnJD5PaLmDFS0LjKOf3KFoQacEtoaZJNQ5vJXoquxNxRAANk+k1YtGaR3rhnl1b+KA4ALbI+KdTi+pVXpiwYfr334NMIRWz0sRnBgwtta1XructaZZuZzRgoqKdf5AcED+LzwO0423IT4HRI=,iv:GUAZb7tc/gTHBe+J20yN0AZZr72ZtgETw67tEk+3jyU=,tag:bKk31NWsnKwuZHov0jLcEw==,type:str]
-  claimName: ENC[AES256_GCM,data:0iKAY0Yc,iv:JMNRx8Blchf5FtISf5I310G9p3/RpOvA96OvHNXhzd8=,tag:DpJpvvLvIfp19x590krDkA==,type:str]
+  claimName: ENC[AES256_GCM,data:6/fc01iw,iv:vqi1DBRswmpYi4rHxgfbVtQvfc6YJ04zZAsO7rtWn4Q=,tag:RjFgl5T35E1o59BRj1Ru3Q==,type:str]
-  redirectUri: ENC[AES256_GCM,data:RuQNx/UnXnPQj6qj1s393mfmROpIOiHcDPVlKB/yq8FZJPPQ5QrpeCg3OQeTgP0=,iv:Ro/mLT5K17qw2ETzpSlMwbD+fULQAZph0sSxUd8W510=,tag:G5wJgw07mSg+VVeOdV6+bg==,type:str]
+  redirectUri: ENC[AES256_GCM,data:OFWVS48jpUWlMrTy/6sboqj6Icp+Gqg19Gs9muM8ChMZC4ZHO0S+iBjnoI4OOjQ=,iv:yMJl9/yYAOyK3hs+SzV+XcjiRM7fu/viIEDgsRCBji4=,tag:wxcQnym0s1m+WA+sjxqtHw==,type:str]
-  comment: ENC[AES256_GCM,data:Ss0X+JF0f1lhjqsaIm4izck3Fjg=,iv:yAE1yQ8JeiTxweeratorHUThP+WGZkns47LiE9uenGs=,tag:pIISguCc3J5cWIy4QYdZmg==,type:str]
+  comment: ENC[AES256_GCM,data:jP73sH9gNlGAXUJ+K1bkq85JlVg=,iv:cY9CGDibHX6qaXAaoZxv1YlikGyq7Dx3N3QZVjQC9N4=,tag:z1OlTgEDreJIejdr4YI23w==,type:str]
   claimPrefix: ""
-  scopes: ENC[AES256_GCM,data:wdkNqB13kjioN9d0megdSAxMvzlLB6xppwR6,iv:hQEr/JcWB9dHryrMWRr4c//MwIInKHZM4uIa++vvO08=,tag:NHMWwfDGha5W2yfYOjLP9w==,type:str]
+  scopes: ENC[AES256_GCM,data:luQZB3bMQFpYb7/jF8S7tpNRvPYHHPDGRrRj,iv:dOgJXm0A8Igkt2/+nh+qkdm/MqOptAN81QdzNeW4/zA=,tag:E7IynZU/Lgag0NnnP481VQ==,type:str]
 sops:
   kms: []
   gcp_kms: []
@@ -28,14 +28,14 @@ sops:
     - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
       enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEWVg0UGIyWUlUdHBmNVgw
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwZm42QUNidTcxd3Zyb0E0
-        YURtVXo2dUdselNOOGFIelczNzZ3NzFlQWxzCmlHMWprODRBR0dibS85djJidE9h
+        N3RPNmhpRzYyUjRYVUh4Y2MyT3RycW9tS2pvCjZpV3BRcXZGbnREeWV0a0IzYTlM
-        OFFwUks2cDEvaFlSN1Vob0pML1o3ZFEKLS0tIDRwNU1RdzFlY1FCcUg2aVZFSFls
+        Z0QzNzRwRU0vQ1cxY2J6NjBCclQ5S1EKLS0tIG9VMzhzSFFtaXZwNnQ0R00raVRY
-        M2pqQ1NvcDlhekdXV1ZoSU5vcE5hNDAKQbaEImwv9Rjb9fpVZv4mQmpSURbp9bBI
+        azFqS1lMejc4NW9ZOEcyUHFTKytKSjQKU90U4aJ1bftcNGHk9VPgywu4rIZgg2TF
-        lkUpOeY8tQRY1u8wNiwEACqFvSP9YMdbDKCDuLEjhMdaX2cAeBRK5Q==
+        tdnxgzY9s8dfB9nYNP3bOINLhcS2tidMpvFYEJAjtr1SF4fql1qMlg==
         -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-09-24T11:47:26Z"
+  lastmodified: "2024-09-28T19:29:25Z"
-  mac: ENC[AES256_GCM,data:fhs0ZSwlmRVHDqrU7i3agCTHScIBmAp0gB4De7qjGfdMTEhOYW6XT2uKAQymYUf4LhqzUYvkPBciO1Vv/pNh05ZrsrKkXVusWgm2rGRMYZJ8LXMkdop1QMFvcowMWHrla9eB2dvfjThXa4mJNVjGaBrb+InGJJeKzovbmuEnqi8=,iv:gbLPUIzsCZXCj3i20usW4oEmAWIq4fLB1B5DDj9jn/Y=,tag:2Ah7GDW4KIM745OU55Bg9Q==,type:str]
+  mac: ENC[AES256_GCM,data:rg1ttNw4G/DN1hS8h4QR8U5Xl8lfWDUydlg28kcP63wqPgsKx3v2SV8AwYGZqmEfYjfhMIae+cYDzt7nO3QnSAQdql3N+wu1YU+QH272FVyITGoZ9bGvKoNOJ0/bOdUQS5Ew05YpwNRqwY+6LlgXn+hGq1YMcW/iAmnPQ3jdaOQ=,iv:2YczF8RpdVtA0GMtmttf6mkBBOyah28yjO0zIJTQ2Og=,tag:v4X4+XYzfLeWb6FYFbFW7Q==,type:str]
   pgp: []
   unencrypted_suffix: _unencrypted
   version: 3.9.0

values/badhouseplants/secrets.vaultwarden.yaml

@@ -1,13 +1,13 @@
 env:
   secrets:
-    enabled: ENC[AES256_GCM,data:6v6hwQ==,iv:QHmMiXxR0rK2ezkeEEel6BZYVgnSS7Rbi45EuG5vKzQ=,tag:urxW5xeOMwhGWestbJl++A==,type:bool]
+    enabled: ENC[AES256_GCM,data:oq3kEg==,iv:aFDSRPNlvfd4DTrBjpCw/mMclGfLWjI04rbqfNERikQ=,tag:wJ+q5TbvUhvEpwMnFmEx3A==,type:bool]
-    sensitive: ENC[AES256_GCM,data:eMSjSA==,iv:l3t2x53K22Nv/RjwjRqIN9iHlyElhzAqXkZwAy4Ta/k=,tag:KJtCvyOcdmm7HxZnOSx7ZQ==,type:bool]
+    sensitive: ENC[AES256_GCM,data:r7Ut0g==,iv:qaXqeP5m/X8Ug/XBsKZKWazI86auZ6JTEABRTH+DDLU=,tag:wARsiZJ2dmlZXMCFQ0Yw8A==,type:bool]
     data:
-      SMTP_USERNAME: ENC[AES256_GCM,data:ot4Y,iv:P8PCLF5tiDKfZrZGaEDH+p7UxSkr+ce8QxJJxpULsKE=,tag:BHZnW96+R1nTPjmCeCtNoQ==,type:str]
+      SMTP_USERNAME: ENC[AES256_GCM,data:n+FH,iv:p27of9O0qoV5XJw6IGp8XTffrljVHTPZ4wNIN/B5/8Y=,tag:eX4AE19yEj42i+nPfs5uNg==,type:str]
-      ADMIN_PASSWORD: ENC[AES256_GCM,data:MRix2LC962BzZW6sRcycNBcsfnvHucfkBg==,iv:TgEL7bUymwG99wb1A1huBl0qbz53zm6BzEvMonHwi8s=,tag:IN4dPYYxaZt4ViDiXOLvnQ==,type:str]
+      ADMIN_PASSWORD: ENC[AES256_GCM,data:alHdDXuw1nJSOYM/2gamUCVr583htSXP/g==,iv:Tn9YlS+CMsQO96jyFs7as5CG8pC8zttxLXG+JwR95ME=,tag:9KnvViAmVA5rrgjD6hVmAg==,type:str]
-      ADMIN_TOKEN: ENC[AES256_GCM,data:NVf9NtCnpaC2+8qrSES89GO/8cEm2+V4YJaPA6o5mzk4V7Xuyd0W9USz4UPlwdtdWLO0bjhk3OwpyrZgdCmJnQP9/rWLzDRdMEg=,iv:LZh5jWahnLYaUNgu0G09aftJa9rPd1bqh+82jw4IiZA=,tag:zlnTKxqe6MMtauF1W0dJNw==,type:str]
+      ADMIN_TOKEN: ENC[AES256_GCM,data:bxZDnWP0ySaxJtBtPkXcPlIiDFuNO+OWe5m5ULJD7U+I0RFuZGvvpYZZ08VUOh9L4lT2827dbze5CRtDFYhRGgw+g/JtGuu4pXY=,iv:4Z1XIBERQ9LNzitwaPu+mO4RojirjtGP7/xVQm+yeZs=,tag:RksjFFzasXLdifmCBOJ0yA==,type:str]
       DATABASE_URL: null
-      SMTP_PASSWORD: ENC[AES256_GCM,data:zFyeMTHuE7Be9DHMqnlhd4VidTFlyoOGSQ==,iv:eT9wV0ssZskma0bbbM/9p5rZctfC6HY6Y+YFjntf9jc=,tag:WihbTrkvC2v9Wn5tmh6mnw==,type:str]
+      SMTP_PASSWORD: ENC[AES256_GCM,data:M+lP5lBGJMUoD8ci5MMXnkTeluRtZWzIdg==,iv:yJcfSZWGLdiyskRujU030Fp3cxT6RCTYekSQ2sw7iB8=,tag:DZsxhnFF8XNPiBTP+7INFg==,type:str]
 sops:
   kms: []
   gcp_kms: []
@@ -17,14 +17,14 @@ sops:
     - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
       enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGLzRMd2ErUGl0b1ErVkZG
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQmVwTDE3WVFrVmdvMWFX
-        bFF0V2dxV3lBc1lGcDFXNmx3OWZadGFqakFNCmsrMmpEWjFUVzRFS2JMOW9MZWJB
+        R2lVS1NTRjZiWXJCUTBja2M5SkJJNDVyV2hjClpISEtmSDRkK0FnV3d4YmtQY3Q0
-        TG5UQkNmendrZU1oRkJrU3BPMzh4cFkKLS0tIFFxQXRyMWxVMjV2ZGI3Y0JCSllU
+        djJZc1RXTXp6RFBMNXF2UUJnTEROa1UKLS0tIG96STlndXZsZ01TMXFZaVE0Tmto
-        alJUd1dqeFNLRWJNTzB4T0Rib25ja00KU9O/9ceV/qIs/27sPUHHgOije0ckPPGf
+        cjBhMmlJM0taZGwzZlhBZnllOWt5OXcKydH6vX+P6YoHYEhlQuN3B5s/ydFQg/bp
-        IUrshO3wqv6SBI1c/XlPHYWJSASjZZEk4wf3AkCVu3D4mm5bwD0J0w==
+        +sufia1rWgVkOrZ7WxEWahVHa0TAJL0gQq5mlNsZJP+++GgtZdpfeQ==
         -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2024-09-26T20:49:14Z"
+  lastmodified: "2024-09-27T20:21:51Z"
-  mac: ENC[AES256_GCM,data:bjYiffGodlB/2tV7thE3LUyyitTF/ovKRvygtDy5Ttfa69UcUyxZltDRhzFPS0J0lNQsfJ1ty+zm7MKtRjmHjUz1uce6xO9svEFNl1vWMaOz+2VcbrME4XQCqZeI9Slwd0C/r4lSWJJEp/8lLe6EexoYDu6t7Tr7TVvcXNO1038=,iv:+pXgGw4/5lFM69HiwSOReqaTB3vrYkyI4qEBdGuyi6E=,tag:TEYfphz57Wo9DK1TZJFK+A==,type:str]
+  mac: ENC[AES256_GCM,data:qQZGHRZ7quFHLXlkNaZyTL+diw6AzZTXPcJbo1OOE6cWR5+slLyK4qHnCN4ioJXBbex+S23dKY1OJgk93mW8jDwIvfEW80SFYlgITXjxLWJRJJLnNcjCvKi5U7mtUzW1nFxZhKJpzv+uBEse0TFXMfCalZn5FXfT8xjiKeqGPu8=,iv:uEgpubv6bF8ciseSdwJcziC4e15ZDA338BzDjzmSZO8=,tag:Rgq9wKSTYQrdJfd4C08CCQ==,type:str]
   pgp: []
   unencrypted_suffix: _unencrypted
   version: 3.9.0

values/badhouseplants/secrets.velero.yaml

@@ -1,8 +1,8 @@
 credentials:
-    useSecret: ENC[AES256_GCM,data:synuEQ==,iv:DoTxRvHamHSPh6Fy7f2/lQbIXVQP7bg0+gRDNLK5ExI=,tag:IMxGc67WNUWtyv7xeqLKDw==,type:bool]
+  useSecret: ENC[AES256_GCM,data:jNo9Hw==,iv:tFJ1xXlSvzdmGk32IxNoygKkOTYg1uhWiTQ+Fb4vxho=,tag:F+aoapAoe8EIwl97pcklIA==,type:bool]
-    name: ENC[AES256_GCM,data:iOdJiWlezjgsI1NsET8Q,iv:dt3Ugyi1/B2pHhPlUUfJZ8lT57OUZZhXdQ8qbm0D/20=,tag:N4mxjl0NGNxNDtwEZjvrpg==,type:str]
+  name: ENC[AES256_GCM,data:T6hiTDHyG7iqx0aQg4g6,iv:6ykrI3VcYPKInFAPsYl0TzynEdl/PQvCKQp0UCtytXM=,tag:IH64olXo7zJ2zOWDsqCUxQ==,type:str]
   secretContents:
-        data: ENC[AES256_GCM,data:x2kwYP7i0Nz0YhjaoOLY7mYdXchdYwy2wZDypePGyS18dfBttmrzgp4JCPpFbL3QbkmK4u+Cs1+/Gyz1Zk3I7lnzW+T0rp4t,iv:zYfGPyGe5fDHI2MbSjrxFqRmjSChzA9KrKXCGoEyzrw=,tag:AGOh63/OVROHo5VYXV9tzg==,type:str]
+    data: ENC[AES256_GCM,data:rdQwbeRiROTz0JHarw4Xc7FMJ0ynSaFniR+8zi82bg1sdaTUrKZrveFktsvR05CsEuskIs0nVsJh99XmR5ro4NGvzc0V6hpR,iv:+poyt47TO3+lVzkK8L32OJreylYPJlZslBGpnNlO+aE=,tag:pMIQ6aEGC8ifEdfkA+RUQw==,type:str]
 sops:
   kms: []
   gcp_kms: []
@@ -12,14 +12,14 @@ sops:
     - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
       enc: |
         -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2QVJqcDUrSll4ZkJGZXFF
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKYldnZHQ0NCs3MDg2VGgy
-            dWIybkc4QlduakIvSzM2eHkzNHdUWTdibFZJClROdDZmRU5NcE1TbjZnTDhZNEdY
+        MWdxS3dzbk9KMllXcWF6eENxZGhValJYR1VzCmJKS09RZXcrckJGU1o5akFidnZa
-            dytnU1l4Z3BUUk9NNVprK2o2UDZ6d3MKLS0tIG5EVHpZaThPYmkzcVZWaFgvbW5r
+        dXo0QUxOMThyR1Vqajg0T0RSZ0dtaEUKLS0tIGZ5WjBZYlVYS3pmamF0dUszU1dM
-            MnkvbjY1dzV1cU5BNjU4aG1EekNsWFEKZavz2hNlogTfUH2oz6ovfv9vmlmbBy7C
+        WDhwZkNTTzR5UGRpYkFUTWdldlVEd0UKr/6w/J2wHcE+N8Ej9+X596ENLtl/Ux23
-            fIrWnBzmO+bl2GIb3mNXUPv8HjfuVN6YzFdew5Kxhls1P5op/8cEVQ==
+        aTHu7gPHMEWZx4/r3HQWkY4IfQBM3Hl2069DhiXSyFPZJPYB6KECXA==
         -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-08-22T13:52:31Z"
+  lastmodified: "2024-09-27T21:21:45Z"
-    mac: ENC[AES256_GCM,data:/tPHVPEigjHM3nmoNKcyF+v2rjFKPgMA0OVdjNtuPE6zkg/W2U59CqmFaqSfLkswH9OZdtC8ObyKELhEqPOAYdMzFpyOGAtYB0wpY6ghsza9O4qFhuvpHp0Nv2qFT4BtEvbIofn1tVAAfRiRvQo2oV18hW116HAcyoTLBsLAzPo=,iv:plcyO/TXxXgmuy8YA0bmCYWdEmWXhHydLQYZxr/bDpU=,tag:xAk6qnS2ju61Nhpi5gvWYw==,type:str]
+  mac: ENC[AES256_GCM,data:GdEoqBoX4sjt0Q/89H5vl0n0B8tRLQP+LUwKu3joos1l9w3tVvzDV+a51DDLRtMHKHQlsUMl8aJ/xzBoE61qjlDSZ/AbQ+P5gv1LRMwsDSDhpv8NJH1wfT920MMCYdB2z/xuqwnhymiYFIM+c2dEcBU0bx342f58jn5WMn6n9Ac=,iv:BnOEGSyPyLgPc5iGLhDXH+Roiy3Gt7o79hUK2P8z1dc=,tag:N/vks8VJEDnEs/r6eDR45A==,type:str]
   pgp: []
   unencrypted_suffix: _unencrypted
   version: 3.9.0

values/badhouseplants/values.gitea.yaml

@@ -103,7 +103,7 @@ gitea:
       TYPE: redis
     mailer:
       ENABLED: true
-      FROM: gitea@badhouseplants.net
+      FROM: bot@badhouseplants.net
       PROTOCOL: smtp+startls
       SMTP_ADDR: stalwart.badhouseplants.net
       SMTP_PORT: 587

values/badhouseplants/values.grafana.yaml

@@ -23,7 +23,7 @@ datasources:
     datasources:
       - name: Prometheus
         type: prometheus
-        url: http://prometheus-operated.monitoring.svc.cluster.local:9090
+        url: http://prometheus-operated.observability.svc.cluster.local:9090
         access: proxy
         isDefault: true
 grafana.ini:

values/badhouseplants/values.kyverno.yaml

@@ -0,0 +1,2 @@
+config:
+  excludeKyvernoNamespace: false

values/badhouseplants/values.minecraft.yaml

@@ -104,7 +104,7 @@ minecraftServer:
       ingress:
         enabled: false
 persistence:
-  storageClass: longhorn
+  storageClass: openebs-hostpath
   #storageClass: local-path
   dataDir:
     enabled: true

values/badhouseplants/values.namespaces.yaml

@@ -1,11 +1,8 @@
 namespaces:
-  - name: monitoring
+  - name: kyverno
+  - name: observability
   - name: databases
   - name: applications
-  - name: development
-  - name: production
   - name: platform
   - name: games
   - name: pipelines
-  - name: rook-ceph
-  - name: longhorn-system

values/badhouseplants/values.openebs.yaml

@@ -0,0 +1,36 @@
+localpv-provisioner:
+  hostpathClass:
+    isDefaultClass: true
+zfs-localpv:
+  crds:
+    zfsLocalPv:
+      enabled: false
+lvm-localpv:
+  crds:
+    lvmLocalPv:
+      enabled: false
+mayastor:
+  csi:
+    node:
+      initContainers:
+        enabled: false
+  etcd:
+    # -- Kubernetes Cluster Domain
+    clusterDomain: cluster.local
+  localpv-provisioner:
+  crds:
+    enabled: false
+openebs-crds:
+  csi:
+    volumeSnapshots:
+      enabled: false
+      keep: true
+engines:
+  local:
+    lvm:
+      enabled: false
+    zfs:
+      enabled: false
+  replicated:
+    mayastor:
+      enabled: false

values/badhouseplants/values.openvpn.yaml

@@ -1,18 +1,20 @@
----
+image:
-# ------------------------------------------
+  repository: zot.badhouseplants.net/allanger/container-openvpn
-# -- Istio extenstion. Just because I'm
+  # ------------------------------------------
-# --  not using ingress nginx
+  # -- Istio extenstion. Just because I'm
-# ------------------------------------------
+  # --  not using ingress nginx
-# istio:
+  # ------------------------------------------
-  # enabled: true
   # istio:
-    # - name: openvpn-tcp-xor
+# enabled: true
-      # gateway: istio-system/badhouseplants-vpn
+# istio:
-      # kind: tcp
+# - name: openvpn-tcp-xor
-      # port_match: 1194
+# gateway: istio-system/badhouseplants-vpn
-      # hostname: "*"
+# kind: tcp
-      # service: openvpn-xor
+# port_match: 1194
-      # port: 1194
+# hostname: "*"
+# service: openvpn-xor
+# port: 1194
+
 # ------------------------------------------
 traefik:
   enabled: true
@@ -26,11 +28,9 @@ tcproute:
   enabled: false
 storage:
   size: 128Mi
-
 openvpn:
   proto: tcp
   host: 195.201.249.91
-
 easyrsa:
   cn: Bad Houseplants
   country: Germany
@@ -38,7 +38,6 @@ easyrsa:
   city: Duesseldorf
   org: Bad Houseplants
   email: allanger@zohomail.com
-
 service:
   type: ClusterIP
   port: 1194

values/badhouseplants/values.prometheus.yaml

@@ -1,4 +1,3 @@
----
 # ------------------------------------------
 # -- Istio extenstion. Just because I'm
 # --  not using ingress nginx
@@ -13,14 +12,12 @@ kubeApiServer:
   enabled: false
 grafana:
   enabled: false
-
 prometheus-node-exporter:
   prometheus:
     monitor:
       enabled: true
       jobLabel: jobLabel
       interval: 60s
-
 defaultRules:
   create: true
   rules:
@@ -52,11 +49,10 @@ defaultRules:
     prometheus: true
     prometheusOperator: true
     windows: false
-
 prometheus:
   prometheusSpec:
     enableAdminAPI: true
-    retentionSize: 1GB
+    retentionSize: 3GB
     retention: 20d
     podMonitorNamespaceSelector:
       any: true
@@ -76,4 +72,4 @@ prometheus:
           accessModes: ["ReadWriteMany"]
           resources:
             requests:
-              storage: 1Gi
+              storage: 4Gi

values/badhouseplants/values.stalwart.yaml

@@ -42,7 +42,7 @@ workload:
 storage:
   data:
     enabled: true
-    storageClassName: ceph-filesystem
+    storageClassName: openebs-hostpath
     size: 1Gi
     accessModes:
       - ReadWriteMany

values/badhouseplants/values.vaultwardentesttest.yaml

@@ -1,4 +1,3 @@
----
 workload:
   kind: Deployment
   strategy:
@@ -46,7 +45,7 @@ extraVolumes:
     emptyDir: {}
 storage:
   data:
-    storageClassName: ceph-filesystem
+    storageClassName: openebs-hostpath
 env:
   environment:
     enabled: true

values/badhouseplants/values.velero.yaml

@@ -5,7 +5,6 @@ initContainers:
     volumeMounts:
       - mountPath: /target
         name: plugins
-
 configuration:
   features: EnableCSI
   backupStorageLocation:
@@ -21,13 +20,12 @@ configuration:
         region: us-east-1
         s3ForcePathStyle: true
         s3Url: https://s3.e.badhouseplants.net:443
-      publicUrl: https://min.e.badhouseplants.net:443
+        publicUrl: https://s3.e.badhouseplants.net:443
   volumeSnapshotLocation:
     - name: aws
       provider: aws
       config:
         region: us-east-1
-
 deployNodeAgent: true
 schedules:
   daily:

values/badhouseplants/values.woodpecker-ci.yaml

@@ -49,7 +49,7 @@ agent:
     WOODPECKER_SERVER: woodpecker-ci-server:9000
     WOODPECKER_BACKEND_K8S_VOLUME_SIZE: 2Gi
     WOODPECKER_BACKEND_K8S_NAMESPACE: pipelines
-    WOODPECKER_BACKEND_K8S_STORAGE_CLASS: ceph-filesystem
+    WOODPECKER_BACKEND_K8S_STORAGE_CLASS: openebs-hostpath
   serviceAccount:
     create: true
   rbac:

values/badhouseplants/values.zot.yaml

@@ -22,9 +22,6 @@ service:
 persistence: false
 pvc:
   create: false
-  #  accessMode: "ReadWriteMany"
-  #  storage: 5Gi
-  #  storageClassName: ceph-filesystem
 mountConfig: true
 mountSecret: true
 strategy: