badhouseplants/k8s-deployment
4
0
Fork 0
Code Issues 3 Pull Requests 13 Actions Packages Projects Releases Activity

Compare commits

base: badhouseplants:bb02a63f2d7974e2254562c20c52f270271043be
Branches Tags
badhouseplants:main
badhouseplants:renovate/woodpecker-2.x
badhouseplants:renovate/renovate-39.x
badhouseplants:renovate/grafana-8.x
badhouseplants:renovate/postgresql-16.x
badhouseplants:renovate/kube-prometheus-stack-66.x
badhouseplants:renovate/velero-8.x
badhouseplants:renovate/vaultwarden-3.x
badhouseplants:renovate/rook-ceph-cluster-1.x
badhouseplants:renovate/rook-ceph-1.x
badhouseplants:renovate/cilium-1.x
badhouseplants:stale-teleport-installation
badhouseplants:renovate/vaultwarden-2.x
badhouseplants:renovate/helm-library-0.x
badhouseplants:add-ci
badhouseplants:script-fox-xray
badhouseplants:before-single-node
..
compare: badhouseplants:3ffddce991ee98fdc11bddb8e7edbaaf4a4e56fa
Branches Tags
badhouseplants:renovate/woodpecker-2.x
badhouseplants:renovate/renovate-39.x
badhouseplants:renovate/grafana-8.x
badhouseplants:renovate/postgresql-16.x
badhouseplants:renovate/kube-prometheus-stack-66.x
badhouseplants:renovate/velero-8.x
badhouseplants:renovate/vaultwarden-3.x
badhouseplants:main
badhouseplants:renovate/rook-ceph-cluster-1.x
badhouseplants:renovate/rook-ceph-1.x
badhouseplants:renovate/cilium-1.x
badhouseplants:stale-teleport-installation
badhouseplants:renovate/vaultwarden-2.x
badhouseplants:renovate/helm-library-0.x
badhouseplants:add-ci
badhouseplants:script-fox-xray
badhouseplants:before-single-node

No commits in common. "bb02a63f2d7974e2254562c20c52f270271043be" and "3ffddce991ee98fdc11bddb8e7edbaaf4a4e56fa" have entirely different histories.
bb02a63f2d ... 3ffddce991

22 changed files with 164 additions and 262 deletions
Show Stats Expand all files Collapse all files

2
installations/applications/helmfile.yaml
View File

@ -105,7 +105,7 @@ releases:
chart: grafana/grafana chart: grafana/grafana
namespace: applications namespace: applications
version: 8.5.1 version: 8.5.1
installed: true installed: false
inherit: inherit:
- template: default-env-values - template: default-env-values
- template: default-env-secrets - template: default-env-secrets

3
installations/monitoring/helmfile.yaml
View File

@ -9,7 +9,8 @@ repositories:
releases: releases:
- name: prometheus - name: prometheus
chart: prometheus-community/kube-prometheus-stack chart: prometheus-community/kube-prometheus-stack
namespace: observability namespace: monitoring
installed: false
version: 62.7.0 version: 62.7.0
inherit: inherit:
- template: default-env-values - template: default-env-values

25
installations/platform/helmfile.yaml
View File

@ -16,8 +16,6 @@ repositories:
url: https://charts.goauthentik.io/ url: https://charts.goauthentik.io/
- name: minio-standalone - name: minio-standalone
url: https://charts.min.io/ url: https://charts.min.io/
- name: kyverno
url: https://kyverno.github.io/kyverno/
releases: releases:
- name: argocd - name: argocd
chart: argo/argo-cd chart: argo/argo-cd
@ -66,8 +64,6 @@ releases:
version: 2024.8.3 version: 2024.8.3
namespace: platform namespace: platform
createNamespace: false createNamespace: false
needs:
- platform/db-operator
inherit: inherit:
- template: default-env-values - template: default-env-values
- template: default-env-secrets - template: default-env-secrets
@ -79,24 +75,3 @@ releases:
inherit: inherit:
- template: default-env-values - template: default-env-values
- template: default-env-secrets - template: default-env-secrets
- name: kyverno
chart: kyverno/kyverno
namespace: kyverno
labels:
bootstrap: true
version: 3.2.6
- name: kyverno-policies
chart: kyverno/kyverno-policies
namespace: kyverno
labels:
bootstrap: true
version: 3.2.5
needs:
- kyverno/kyverno
- name: custom-kyverno-policies
chart: ../../kustomizations/kyverno/
namespace: kyverno
labels:
bootstrap: true
needs:
- kyverno/kyverno

10
installations/system/helmfile.yaml
View File

@ -22,8 +22,6 @@ repositories:
url: https://piraeus.io/helm-charts/ url: https://piraeus.io/helm-charts/
- name: vmware-tanzu - name: vmware-tanzu
url: https://vmware-tanzu.github.io/helm-charts/ url: https://vmware-tanzu.github.io/helm-charts/
- name: openebs
url: https://openebs.github.io/openebs
releases: releases:
- name: namespaces - name: namespaces
chart: '{{ requiredEnv "PWD" }}/charts/namespaces/chart' chart: '{{ requiredEnv "PWD" }}/charts/namespaces/chart'
@ -122,11 +120,3 @@ releases:
- template: default-env-values - template: default-env-values
- template: default-env-secrets - template: default-env-secrets
- template: crd-management-hook - template: crd-management-hook
- name: openebs
chart: openebs/openebs
namespace: kube-system
version: 4.1.1
needs:
- kube-system/cilium
inherit:
- template: default-env-values

40
kustomizations/kyverno/pvc-patch.yaml
View File

@ -1,40 +0,0 @@
apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
name: replace-storage-class-by-openebs
spec:
rules:
- name: replace-storage-class
match:
any:
- resources:
kinds:
- PersistentVolumeClaim
mutate:
patchStrategicMerge:
metadata:
annotations:
volume.beta.kubernetes.io/storage-class: openebs-hostpath
spec:
storageClassName: openebs-hostpath
accessModes:
- ReadWriteOnce
- name: remove-unwanted-annotations
match:
any:
- resources:
kinds:
- PersistentVolumeClaim
namespaces:
- games
mutate:
patchesJson6902: |-
- path: "/metadata/annotations/volume.beta.kubernetes.io~1storage-class"
op: replace
value: openebs-hostpath
- path: "/metadata/annotations/volume.beta.kubernetes.io~1storage-provisioner"
op: replace
value: openebs.io/local
- path: "/metadata/annotations/volume.kubernetes.io~1storage-provisioner"
op: replace
value: openebs.io/local

52
values/badhouseplants/secrets.gitea.yaml
View File

@ -1,31 +1,31 @@
gitea: gitea:
admin: admin:
username: ENC[AES256_GCM,data:hn9KbBrp6Ak=,iv:wg7E83jsBkxvBdKWbObizqWtfI1Dy1KnwAEZvnY1anc=,tag:UuX2qt/AVQpaZu251J4EGg==,type:str] username: ENC[AES256_GCM,data:v3sgQA1FXqs=,iv:TXpcQIaJfhHyjBRkVSlwzUVUCkhbFzPvyiUXRrc89NE=,tag:JZ67LtzNrI1BpwvWLueJHA==,type:str]
password: ENC[AES256_GCM,data:ETNIrZsYXVtMZh9/sU+RAV8zzK8=,iv:tOzJVOeEIJDfMIrbhQVOyHlPQH7pSJdrcQ5oeq1Hxtg=,tag:hILdhhYmix4O53ZdF8A+gg==,type:str] password: ENC[AES256_GCM,data:YZrXQ5yail+jmNQOGz50uT+icTE=,iv:eoGozzZ89DJqjt0j4cuf+2UmHnT+VP8vDY0ClSmiqfI=,tag:y8O5wJqiChNWV+5BbFhdCg==,type:str]
config: config:
mailer: mailer:
PASSWD: ENC[AES256_GCM,data:/wnVyhS6pBUJOE9PS39ZW+carVqn+WG+Sw==,iv:xraey6+BICLdsX81JLjFDGikj7ILqu40HJOY43nGBeg=,tag:ALkgbnK0QDVa1ZTHujE0fg==,type:str] PASSWD: ENC[AES256_GCM,data:QxCpONzUd9h/qS9H77zJMsAPUp3un5Yl4+6+l3rPajRuRvjaRtcTXAxLnxpxEgGLUFpLgIPryWD3eMKT,iv:5iyEN1vUrxmgEN803fd6Q63zxnhmmGa4aj/TRrJNTwA=,tag:63SaHKG/K+PQ5grwv+zN8A==,type:str]
database: database:
PASSWD: ENC[AES256_GCM,data:VbWIJV60OURufOh03zt2noSxb04=,iv:bHjeClvdB10byx90pFJVec3MywRYnTPpm8nfC51S88M=,tag:mfI4dNBZZtunMPZaVF8+LQ==,type:str] PASSWD: ENC[AES256_GCM,data:qH2pVwmY1o7pVFMyl9tBGW02Psw=,iv:/XkFFeCiYWE3dCoYj63rIA0+V3lvJWZUvMyO6NkAfSM=,tag:UWIzPp9MlYRUHbBRRJrTnA==,type:str]
session: session:
PROVIDER_CONFIG: ENC[AES256_GCM,data:mtJYLatUA2VwE5MAX3KBceTS2eJG9mWlNAoHmsraPAcm9BeqpNf2OhnefnFiY6af9bSwC8/C/uXnOIBC12PuF5+DCp6ce8OsneaEsZKBVvurGc3fmCg2zDo/7VCI3EQ1BUZcAQIZl8cMTNMRfPhzwMug2LHBhYgS,iv:khZU/ENruxI0lwqCKz6VcdGFPok04/iyDT639OB3A04=,tag:ks6Y+ddsgXNZAW+XuYxLfA==,type:str] PROVIDER_CONFIG: ENC[AES256_GCM,data:lI3Mg6ZljleZ2IdivcSOrvLDMUdhbHTlRN2viIwyE+EHpHOk+0Onu2AkOTgnspGhvXkmpX0AAynUCOEmkI1k0eST4XdC4a+vp895Hu/6+UgODN2UCMutjkVg0kgRm6GcpI9i/FnoaHp4VR09nT9k13dqXCs7VhEk,iv:SMG084+MzKSxkgJqASNrkDVcVjw9VEjp0vsYyziobtY=,tag:kM6i/8LUvzd+3K5iXmzdag==,type:str]
cache: cache:
HOST: ENC[AES256_GCM,data:5E42e/2jSYt1qbDiU2f07isGJaKGfaps27y2+bVe/1DBhmVytVZNjidqyB2qS4y7Gg/XLbRKC7Dx2tbG0YE37unXOx3sHEHPQEBreSutXapEu3mcHFmhsIkSe7fatAntPZPdMkNZMm3I+AqJQSBH1FsMV7vlFh2a,iv:wuifOOnMIlyWygn8K/7eUH6NrhRkDWW85Ha9KuJWuJ4=,tag:bRX/HU74wfWKdH/MUYLuMQ==,type:str] HOST: ENC[AES256_GCM,data:R9V0k6ecZgb3saCeF3VYSR4zGv67ikdwckembcmU6f9o9M7GVivOV/nMVrW9dN3RKOVsyznJAYiFKtlPYD4JxTkjDCIbtK04innCdUmMqi6ziXeb1RQq9syefVOHF0GRi/sbWfruNY39dwqbH7Ol+Ot9oDMjDLJ6,iv:fCVXeLYZSV5x7E8TpX5XNShagZHfUSpF/rewvX2BVqs=,tag:bcLJh4QSSw+QkGIYmOSC3Q==,type:str]
queue: queue:
CONN_STR: ENC[AES256_GCM,data:xrTWrgen3wnSKplk3r9BdXTd/wUY+QyphpKdlu5IaEGwS5vbUCaI3+JOg1GFFyeVO0Uaj00c1taIu4q9+ul6YMYaouMPSSJ9tcftzNqgA3ZaDeUzYnU/rQTg8SM6bxGYcLQMtN9zhO+BsmKJmC04J5ST2qu/OEqb,iv:EUmeVGQDBLVG3dwTsA0HQnliryWTmukFXdkAQkS7Whk=,tag:Ep7YVUJiGt3dHZHoG8MS6w==,type:str] CONN_STR: ENC[AES256_GCM,data:NuXv8GwzLccYAyLL9e02PKCWoUSQ4gYJg6n5VI64eQ6nQiKgYN6kjvQYPkK/zIrHwv4pnsiI+IpUHiQhIsZyMQW8SibBO38ZfEUwzJBpp9VSjbGYuqwK6srcsk+H4F5XZhI2tsAXchywf8bhC90dtX+sneMAYdcv,iv:X5RrpwG38M/x0+c/BFQc9dhiJPGeYngvHL/wsDZZbQA=,tag:SN+6f6Ld+98tDNaI8Sc5yQ==,type:str]
oauth: oauth:
- name: ENC[AES256_GCM,data:80trOTjt,iv:XZ7RlcsdueY43Q6FUM+LAZ0j94VQw9DU2k8KqLl3uMI=,tag:7nGXu3H4g/gBaJi2wyP43A==,type:str] - name: ENC[AES256_GCM,data:q+bXBBH+,iv:tEGL4Hgp1a7CVZ0WNfPylGM6llDuU+gFwmGrZGyBihA=,tag:j8igdV+mTxuHP9rjeixkDg==,type:str]
provider: ENC[AES256_GCM,data:jVEvNRAK,iv:0TuV5ZfSSP6ENNuWVtYDWWCmUkQbNy0fR59j1nywQGs=,tag:ZOqB7tf9xEeBSQSODWAq4Q==,type:str] provider: ENC[AES256_GCM,data:Xb7vAdyq,iv:49z26uy6QRo5y/lSXKvcfywLK0DuTFb63YVxYA1wobE=,tag:0ynquRoj0Bil8FYg6wURVg==,type:str]
key: ENC[AES256_GCM,data:2Xu5PXhUWnWulSyR+a6oIr0YD0s=,iv:2+UFaOtd6WIOADn6/39TzHhNyTi3JJrYXQqrY57Qurw=,tag:K7vBwFGBM+77SVmU92Jhbw==,type:str] key: ENC[AES256_GCM,data:BPgxRsbe6BAQlvprJf3q8B+ddQY=,iv:QrBEnvkTwKmf1/7TCGDPIADPhhHfugCzNRwSJJe/nvA=,tag:n3laygkDMAHg8jFfplRPSw==,type:str]
secret: ENC[AES256_GCM,data:HEZNgZ6kQn5yOPUGyww+/rfYIGgB/vj9Yfsn3GFSUs31ZNe68G1huA==,iv:07hfyhw+KD2aR976IpWfAwjMXZC4uuz6hrXzOCRxIGw=,tag:WB57de5jqrxaSkyyc2DC+g==,type:str] secret: ENC[AES256_GCM,data:wXLN+GYGCHhyQqQYGso6b1U1BmOBHSkXR61wyoEEHIMYRnGmDCA1ng==,iv:DEXqNGRLSU+EUNt1x9dqEMRc8nsGg+TjN1c6wyQcTQQ=,tag:uX/3TWYSYKX3k9BJSIf+TA==,type:str]
- name: ENC[AES256_GCM,data:sIdCMyXgLknP,iv:CiptgMsOQcgrCA4vUEWlmwAL8xrXW+lVN16zJ/TnrUQ=,tag:3OYYQVgGN+UYSGkYalQEJA==,type:str] - name: ENC[AES256_GCM,data:yE+puM05oI/1,iv:Ups4cBHl/Lmj8RSPW5sh2A9xGIxHOazJnTpyFluhfhU=,tag:xLMiY0p8KQaBGFrog7mzXQ==,type:str]
provider: ENC[AES256_GCM,data:abL1jCQ/SnikvaFy7Q==,iv:nqabj6UltKcauQ+PrYP7Ok2T0PrPbwlGrHwJKVHJyBY=,tag:Q+3hwSTPeWkIIalDFswJtQ==,type:str] provider: ENC[AES256_GCM,data:r9qYI/J613FmkrFRDA==,iv:EUxmXmg4T7nRFVa4HZAxRfb+90fsSKcns/suu6tQC8E=,tag:HNMAwWigse/50YTEg429wg==,type:str]
skip_local_2fa: ENC[AES256_GCM,data:hQT9qw==,iv:qsQlx2BrTpg5kmVspZsGb1zAiNMyWyX25EJGHWwLyTw=,tag:x1OW3mNVdSPPKfjat9JDBA==,type:str] skip_local_2fa: ENC[AES256_GCM,data:jFIZ8Q==,iv:k7pWtnnmBUy/4yE+eJ6C6iwoK+jGHNt0e+3ekUf5KSo=,tag:iCgt7V4mheagXBkZwR0S1w==,type:str]
key: ENC[AES256_GCM,data:pgFH36E=,iv:cU6aHL2F71+ciA55UgiHm7oPDtSo+MUT1Pqg6igFZ1k=,tag:7BXwd/XUdYpwvVhBXinJug==,type:str] key: ENC[AES256_GCM,data:KSPkJbE=,iv:pnuGLWLqYPX13XoKEPIXQcPbLpK00CJG4gJIgKvgDiA=,tag:GD3kbHU1IuslQ8nkSiQmKQ==,type:str]
secret: ENC[AES256_GCM,data:uraGme2NLEfg0FjXEVNtElD8g6MrZx10DFlsny3kOSQthE3Nie/RMLuF3ufBZcFaPoSjKX8Tu6BOCheEzEm/E2ghU32TmfAxSJVNMwupT4mHviop+mNSnxNt41DRDv2fM8f2QDFWEpH9t2c4uepR+aGfzt58KJ70/RS03j/st50=,iv:8cr8PaEk3sId+6hCgtf2bihUYqtBszIsy1bFpnB1eBY=,tag:MnrVoVuKdYPmc53o6D27XQ==,type:str] secret: ENC[AES256_GCM,data:N/GQgcpaFgUSq2zPSciWiqm/3l8aDmpzSqXL0NEpDNe9eB7FBvInljU4/HOCBoxd09Xv+6UDr4RzP3fZpyLkQVGHEUx2MLEDobmEWbCXsXNhV/92GN9wGe+gF9w4jPlieLXIGucn1ELwnPD13nnb6aFH2BJjeWb93MxSNqOSjfk=,iv:5W9YNbJI/8o/CeDGwLo7lpLoS294cwMgNK2yCRdaGCs=,tag:rLL3ENb9/Kei4ubrlMIf1Q==,type:str]
autoDiscoverUrl: ENC[AES256_GCM,data:1ns+6vCF/3qASFR14KYX1su/YI4IAREjRSeG8ld7RmlvFeYu9V6uiHHLiSWPVcj4P9Gh82sqdiFh2YX/TcoVY/mVGopIPreUJNlrlr2hcofn2oYwILj6VBk=,iv:qhV0H9Kk/lMfgv4YvAv4hi1aX4DUN9SSUldJ58bWDfE=,tag:zzdxPxYHkOQWKqGAP7HO5g==,type:str] autoDiscoverUrl: ENC[AES256_GCM,data:l2fkf+wJU52wLG4Ea6+xFRWZoE4WBg3UIT8cOOb9chjzcWWeG6cxKiiI4feevzuUUkIDFEGG04bFu6Gh/tgf/ERiMYlXNVMXF6TDA4gLylZ/InQa6+ra1lM=,iv:4WFqWodHQFxr3lbLvJlmrH0CRjBTHIRGIybw3YyRw84=,tag:T3v9P7l0eEXO5qnp0Kzebw==,type:str]
iconUrl: ENC[AES256_GCM,data:8Ez2F8q7SbDHqEioLLNjwApuFyL1HvuxsdODVmVRet8XAef+gZcXS6s8rQgSbRaiI8aEKItc8or76Rd7VqS3sl+0qU2wPQ==,iv:YE1xtNurA+sNLQaiSQdkz1u0eWMomrI6L3SBVSzNJng=,tag:9CIDfwYc7h7i/iHWmp5UKA==,type:str] iconUrl: ENC[AES256_GCM,data:JcyeyiW/gYi8I30CafwIXD028ChoTHSUAR4P94vU8KOAQ63aybc/lCBpZ2MDNelrJI7gYQX2B5ST2My3FuaySvN2ac3PGA==,iv:90fkZSOWOw5x4gPHduw8kHQCbYE65DrTVp8V1jT0h1g=,tag:U5d0k3XNl5k5n0L93nA8zg==,type:str]
scopes: ENC[AES256_GCM,data:1//BjLyrku25qJqzbg==,iv:7wy1jDCFRBH78oe7KnbAtxFYQvoaBBCzAUHGOCkyJMA=,tag:lT64XKj/rHiKfCIvyrOR0w==,type:str] scopes: ENC[AES256_GCM,data:PmCest22VSJidBXnLw==,iv:RQ1xHmw9ohbeq/C4OcQiB8jlW5NZKZHHyMVS7ihlT1A=,tag:pqZLf2NYBS8Xljg+f+vNpA==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -35,14 +35,14 @@ sops:
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dWNmQjdITllRWHJCM3dv YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4VWhaYTFiOGs2NHF5a2lT
Z2lIb1lzcFZ6eWxiVkxKcWxBL3kyYjNaRVZvCjhCVXZTaW9uaE5pMExFR2w4RGpm Q0NjR2ZOMkdFZTVLUzlmdGo0cHhmbThJY1RzCmFHQzN0eDYrSUt1ZDUzTkZVYTBl
a3ZPcGFXWmRlQ1ZUY1FITlNkR0NzY00KLS0tIHRKYnZCajN4cFJLY0EwNUVhbTBw YzBid2VIQWxyMERQUjk2VlFFajQ5TFkKLS0tIDA4bzlwbWs5d3UraXBXaElCWUNT
TUh6RTJWQXJsbkFCNERmYWJzL1VQancK+MaDoG78tswXqtQY2MYYtsAAgcVvQqGh SDhaYlVhaExiUkVoUSs0MjBrK21LNGsKGjZPAjO8PU3s/8eYFD6/hbinjj4yAU8M
4i5OmTztBp3rpAM9DiT7TASvo1vz3UEak7ApQdaM2PpteiX8VZhIQg== W76hvpASbqg3AoQtSjgNeJfCgfntFdghFy66ELbCCQtO/XB0fIh1TA==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-09-27T20:08:06Z" lastmodified: "2024-09-13T04:19:53Z"
mac: ENC[AES256_GCM,data:Gun7zcN1//UmvPMTi9Fd1gDYIO0HL10n1LhsdFdp6/CGBcjVMBM0Hvpq2VqEN37ipoeENEiKn/KOWkJpbDwz2HE9hEbQ6gSZLKILi/vY2hn76Uc2m6nAVRjSMfCryE7IVA4Yc2dPwhRAjn6ABf1gzWoh02ULjahCNgJ+K7jJJjg=,iv:3JuoL7rpOOhgunAOdhaS7L0X8qG7X3qNGQWQkqcPhu8=,tag:Q5BEt7XDZmY4sNG6uk8QAA==,type:str] mac: ENC[AES256_GCM,data:FGVQm5BxRm046oxnEc4kusR/RsUPeI1wbqyhhsq/VErv/3n4jfww19ixzHpCye+8PzQQNAfWxNyvkwhpArKLFbFcZVsyITChZK7BaHwLmM/IBzN5FwW27gtNVfIU7DCUM2plK6Nk19Ssj7lkr6Q3JWhjKb9oFHr9YbCTqJzjYNU=,iv:l0CWvvWjPY1bh0E7zfCBM6IDJZu3N7vEHk/Eu7iU7tc=,tag:8ziHcJV5kSLtqrRxnvvIjA==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.0 version: 3.9.0

50
values/badhouseplants/secrets.minio.yaml
View File

@ -1,24 +1,24 @@
rootPassword: ENC[AES256_GCM,data:Sj9QUj4bQqZz9ZRSHulhHRcYWVE=,iv:AFGPrsiRA6gs075gjmWLg8qb1pz217Sy7nLQHgKy4GM=,tag:coHd4NZ0p37lYcWh7Npt/w==,type:str] rootPassword: ENC[AES256_GCM,data:SADfxbBdM62niS1Xdlol1L1ogOg=,iv:RBjSqMLYKWkJmt2fuiTnZaPXIGULQUGHR1dmfOJLlvM=,tag:gRjCyfLOeGWlVlt3ihbW2g==,type:str]
users: users:
- accessKey: ENC[AES256_GCM,data:KHXcm8I9Cpo=,iv:DU/nva4K5E4IkZz7N7xfESZncKnQbof6Sv8rJbTwVRc=,tag:4WfJkd4t0eqkr4/CIEXl6w==,type:str] - accessKey: ENC[AES256_GCM,data:WZCEHgof+sE=,iv:NsRvxQhf4L3e9IlMLq9m/aW1vMV9jFh5e6Novx20kJc=,tag:qNdj1jDkyjxM8EMsWGHbYw==,type:str]
secretKey: ENC[AES256_GCM,data:cRGWP6nIZGYws9AUgAkwmoET/g==,iv:Qu1c6xLzFpDRWdUM/XIjIkO6KknIOeSRHb/XEm44+rc=,tag:+NqHXmZNLFtCh/L9/rW+rg==,type:str] secretKey: ENC[AES256_GCM,data:ifkorAMgFXxNm43OPLdoAztPTw==,iv:AgkPkvfLHm8mDHsMfpbmCLa5XT8I53UNcb6ry/pRitU=,tag:HRfy5RGLG+eAKkf35a8oJg==,type:str]
policy: ENC[AES256_GCM,data:7Ptdd4qFo90=,iv:Qx3Ynm0Vjl+YPVAUNtXUpURf9n+PPkM34dBewMW4zss=,tag:sIgimJx3u0xcikskVr1L1g==,type:str] policy: ENC[AES256_GCM,data:PKbIEEOWLtE=,iv:DY2kldt933RElyoZaysMqxtAdjq+bHlAwIeZZzTOFcc=,tag:DmCi9YIfuwiqixgsav9NBw==,type:str]
- accessKey: ENC[AES256_GCM,data:nxWz,iv:l+kT7y9qtzrASOaIIcCoKbHaCdYnn4RnG4J+sqtCONA=,tag:wK6RatUPQMnrqML2bSJKhg==,type:str] - accessKey: ENC[AES256_GCM,data:aM3o,iv:71uE60cLbplVr5MPBrnep9LeO8Xe2QbZW91FzYJZ1oM=,tag:+oms50UJM/qsT5fcrAimgw==,type:str]
secretKey: ENC[AES256_GCM,data:6fATAB+2lypheqVMjgsDVyPiYTHoPeI2Uw==,iv:9Rd61bueMrsW/XJ7F0oK5LIvbVegaZLBSiABP5q01EY=,tag:WfwkhxuAb+irrPjQdAMQMA==,type:str] secretKey: ENC[AES256_GCM,data:eskXQ+nI+yN+BtNmABMEQ4wu+xZU4jgSmA==,iv:9wRgKpxO8Re3fRc9pDQ9j2VXBx4RVgNbdOqay+ByY98=,tag:hCWaWoWAGZb5NPvRS9HydQ==,type:str]
policy: ENC[AES256_GCM,data:Iwu/,iv:+FhFi0JSGGH4sqEELv2xAr3uZnRIS9gljw0OJQR8HUA=,tag:iscBtaxpr/QC7CNXHSfqkw==,type:str] policy: ENC[AES256_GCM,data:Bsgg,iv:8StVF24kd5F6NNkYNVFBPU7I1QxS2J0uUoS8XwF9Dzg=,tag:N4DGgnIaZZfCzP0tbycTdQ==,type:str]
- accessKey: ENC[AES256_GCM,data:DY9K2kx+xDHo,iv:NUVRo7n+Arivki/pC/CM5C48mqX2Ho+MrlB0z2NJffw=,tag:UoyAyXl5Jf1w3z9kycJIWQ==,type:str] - accessKey: ENC[AES256_GCM,data:TXc+nAG3QbT+,iv:RueCXZIsJLQb3T7iZkSrAJtX0NH+335YeSxVMLIvLpM=,tag:A7UEw4qJHES5GUGpuSiRIA==,type:str]
secretKey: ENC[AES256_GCM,data:xnKEaYxgSTMsPAT8vU2bs2lX0lY=,iv:QXDB+2Uneq6XXaKeIY17pl8rPuej5pGux1VA8qVhYOQ=,tag:c4jFeNf9kzQONISOaZ+Jow==,type:str] secretKey: ENC[AES256_GCM,data:z1zpY//KxAC5J1jI5JeSF47AmAY=,iv:ASItFJxmrxvpSxCU+kwMRieOvExR4ZA+f0RZtVF/6mQ=,tag:xSA1XaehFn/x4UnIXQPAGQ==,type:str]
policy: ENC[AES256_GCM,data:acfH2yD6RDmt,iv:3W80PJaAZHNIPlt3VutN5HNAzF+TEZw7F+MTBi60A0w=,tag:Kl+lObipEDxwgeYJQpLomQ==,type:str] policy: ENC[AES256_GCM,data:tcH14hh3suBL,iv:9ZadSBkUJtPHYL6VduNVoXQ+u3UUy3h3aQjZTAPPSJ8=,tag:QwmAbqRDBALys7xFBjuf1g==,type:str]
oidc: oidc:
enabled: ENC[AES256_GCM,data:ZFm6qw==,iv:0PW79J4WHM4/aOujVOQ4pBbOTNFlPnSLyOuYq6mW7NM=,tag:iDu+djacM/hF7XftA9oZUw==,type:bool] enabled: ENC[AES256_GCM,data:fb3rHQ==,iv:JZxKacHRfAPtHLdjKcI3NOTyeLW2lSUMEOsV6EGICQs=,tag:lP2zDO746UaPHUGoTrfqvA==,type:bool]
configUrl: ENC[AES256_GCM,data:hi2fDfbiDYViKHsdRocRfZ/I8NNACHUcjcbdGHNulUEV9SfnJDEkl7XqzGDw43DMOCqMwiaTqtLbc2dciaO2sNz51o4Snv/pw30/HOpws6quLD2xTYg01Wk=,iv:NVoS1cATyNV0Wmx5PAo3f9UTuS4rx13tticp6A5q02s=,tag:KxbPIlglfDbcZuiZIBb/+g==,type:str] configUrl: ENC[AES256_GCM,data:12njGoK0zjSuYCXRkP2vz0ysPzeNoJ6uFWS7hv7mqf9gSfTEZXcC9BKFCnfzeHh+/naJZsWMfgDrqVeNbdTGA0w1qwCwYSy8QXo1b54WeN34QmwlmJCXdRU=,iv:jtCBSWF+mjbwdeNd7nSkmZHza6MZAVZmt62lAnOf6H8=,tag:X89Dzt6RtlhYdtycaN8sLA==,type:str]
clientId: ENC[AES256_GCM,data:g7vcvIc=,iv:7uo+/lJ1F4nV1e0KdmZxaoPBf0hY4z6xgGVOEowF998=,tag:zJmSCtdskALb1Vm8D3BbCA==,type:str] clientId: ENC[AES256_GCM,data:2geq8zo=,iv:/IUg+4RA1W0F3J1Y+P/eteEeSO+9zbX4Se73h+JS9rQ=,tag:EnCidLx/uoluc76+wkYApw==,type:str]
clientSecret: ENC[AES256_GCM,data:yzbQS6EwjTlpfOKMr3G/gmkCz+LgnJD5PaLmDFS0LjKOf3KFoQacEtoaZJNQ5vJXoquxNxRAANk+k1YtGaR3rhnl1b+KA4ALbI+KdTi+pVXpiwYfr334NMIRWz0sRnBgwtta1XructaZZuZzRgoqKdf5AcED+LzwO0423IT4HRI=,iv:GUAZb7tc/gTHBe+J20yN0AZZr72ZtgETw67tEk+3jyU=,tag:bKk31NWsnKwuZHov0jLcEw==,type:str] clientSecret: ENC[AES256_GCM,data:A1pzBwSZ0it/LMiwb0/8yMtYG/2a7aj0+D2l64H5pjqYGg4UBfDOGzba3b7YYCkzS6+zLmCRfN5npi/gTi7K2YULEfLSY1CVxhR85Iuc8Ck3raekNwWWIMl+vyWvlDeGYe29QNF3YHcV2sfmXbKrEm13kFGS1JNCVpSh4tGMOqU=,iv:oJgRA3ooTJN9+9bjGBv2H/uDFp9BA4sUh+UtGFqOoZM=,tag:H/NTVou4OYVVsj7lE4lofw==,type:str]
claimName: ENC[AES256_GCM,data:6/fc01iw,iv:vqi1DBRswmpYi4rHxgfbVtQvfc6YJ04zZAsO7rtWn4Q=,tag:RjFgl5T35E1o59BRj1Ru3Q==,type:str] claimName: ENC[AES256_GCM,data:0iKAY0Yc,iv:JMNRx8Blchf5FtISf5I310G9p3/RpOvA96OvHNXhzd8=,tag:DpJpvvLvIfp19x590krDkA==,type:str]
redirectUri: ENC[AES256_GCM,data:OFWVS48jpUWlMrTy/6sboqj6Icp+Gqg19Gs9muM8ChMZC4ZHO0S+iBjnoI4OOjQ=,iv:yMJl9/yYAOyK3hs+SzV+XcjiRM7fu/viIEDgsRCBji4=,tag:wxcQnym0s1m+WA+sjxqtHw==,type:str] redirectUri: ENC[AES256_GCM,data:RuQNx/UnXnPQj6qj1s393mfmROpIOiHcDPVlKB/yq8FZJPPQ5QrpeCg3OQeTgP0=,iv:Ro/mLT5K17qw2ETzpSlMwbD+fULQAZph0sSxUd8W510=,tag:G5wJgw07mSg+VVeOdV6+bg==,type:str]
comment: ENC[AES256_GCM,data:jP73sH9gNlGAXUJ+K1bkq85JlVg=,iv:cY9CGDibHX6qaXAaoZxv1YlikGyq7Dx3N3QZVjQC9N4=,tag:z1OlTgEDreJIejdr4YI23w==,type:str] comment: ENC[AES256_GCM,data:Ss0X+JF0f1lhjqsaIm4izck3Fjg=,iv:yAE1yQ8JeiTxweeratorHUThP+WGZkns47LiE9uenGs=,tag:pIISguCc3J5cWIy4QYdZmg==,type:str]
claimPrefix: "" claimPrefix: ""
scopes: ENC[AES256_GCM,data:luQZB3bMQFpYb7/jF8S7tpNRvPYHHPDGRrRj,iv:dOgJXm0A8Igkt2/+nh+qkdm/MqOptAN81QdzNeW4/zA=,tag:E7IynZU/Lgag0NnnP481VQ==,type:str] scopes: ENC[AES256_GCM,data:wdkNqB13kjioN9d0megdSAxMvzlLB6xppwR6,iv:hQEr/JcWB9dHryrMWRr4c//MwIInKHZM4uIa++vvO08=,tag:NHMWwfDGha5W2yfYOjLP9w==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -28,14 +28,14 @@ sops:
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBwZm42QUNidTcxd3Zyb0E0 YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBEWVg0UGIyWUlUdHBmNVgw
N3RPNmhpRzYyUjRYVUh4Y2MyT3RycW9tS2pvCjZpV3BRcXZGbnREeWV0a0IzYTlM YURtVXo2dUdselNOOGFIelczNzZ3NzFlQWxzCmlHMWprODRBR0dibS85djJidE9h
Z0QzNzRwRU0vQ1cxY2J6NjBCclQ5S1EKLS0tIG9VMzhzSFFtaXZwNnQ0R00raVRY OFFwUks2cDEvaFlSN1Vob0pML1o3ZFEKLS0tIDRwNU1RdzFlY1FCcUg2aVZFSFls
azFqS1lMejc4NW9ZOEcyUHFTKytKSjQKU90U4aJ1bftcNGHk9VPgywu4rIZgg2TF M2pqQ1NvcDlhekdXV1ZoSU5vcE5hNDAKQbaEImwv9Rjb9fpVZv4mQmpSURbp9bBI
tdnxgzY9s8dfB9nYNP3bOINLhcS2tidMpvFYEJAjtr1SF4fql1qMlg== lkUpOeY8tQRY1u8wNiwEACqFvSP9YMdbDKCDuLEjhMdaX2cAeBRK5Q==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-09-28T19:29:25Z" lastmodified: "2024-09-24T11:47:26Z"
mac: ENC[AES256_GCM,data:rg1ttNw4G/DN1hS8h4QR8U5Xl8lfWDUydlg28kcP63wqPgsKx3v2SV8AwYGZqmEfYjfhMIae+cYDzt7nO3QnSAQdql3N+wu1YU+QH272FVyITGoZ9bGvKoNOJ0/bOdUQS5Ew05YpwNRqwY+6LlgXn+hGq1YMcW/iAmnPQ3jdaOQ=,iv:2YczF8RpdVtA0GMtmttf6mkBBOyah28yjO0zIJTQ2Og=,tag:v4X4+XYzfLeWb6FYFbFW7Q==,type:str] mac: ENC[AES256_GCM,data:fhs0ZSwlmRVHDqrU7i3agCTHScIBmAp0gB4De7qjGfdMTEhOYW6XT2uKAQymYUf4LhqzUYvkPBciO1Vv/pNh05ZrsrKkXVusWgm2rGRMYZJ8LXMkdop1QMFvcowMWHrla9eB2dvfjThXa4mJNVjGaBrb+InGJJeKzovbmuEnqi8=,iv:gbLPUIzsCZXCj3i20usW4oEmAWIq4fLB1B5DDj9jn/Y=,tag:2Ah7GDW4KIM745OU55Bg9Q==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.0 version: 3.9.0

26
values/badhouseplants/secrets.vaultwarden.yaml
View File

@ -1,13 +1,13 @@
env: env:
secrets: secrets:
enabled: ENC[AES256_GCM,data:oq3kEg==,iv:aFDSRPNlvfd4DTrBjpCw/mMclGfLWjI04rbqfNERikQ=,tag:wJ+q5TbvUhvEpwMnFmEx3A==,type:bool] enabled: ENC[AES256_GCM,data:6v6hwQ==,iv:QHmMiXxR0rK2ezkeEEel6BZYVgnSS7Rbi45EuG5vKzQ=,tag:urxW5xeOMwhGWestbJl++A==,type:bool]
sensitive: ENC[AES256_GCM,data:r7Ut0g==,iv:qaXqeP5m/X8Ug/XBsKZKWazI86auZ6JTEABRTH+DDLU=,tag:wARsiZJ2dmlZXMCFQ0Yw8A==,type:bool] sensitive: ENC[AES256_GCM,data:eMSjSA==,iv:l3t2x53K22Nv/RjwjRqIN9iHlyElhzAqXkZwAy4Ta/k=,tag:KJtCvyOcdmm7HxZnOSx7ZQ==,type:bool]
data: data:
SMTP_USERNAME: ENC[AES256_GCM,data:n+FH,iv:p27of9O0qoV5XJw6IGp8XTffrljVHTPZ4wNIN/B5/8Y=,tag:eX4AE19yEj42i+nPfs5uNg==,type:str] SMTP_USERNAME: ENC[AES256_GCM,data:ot4Y,iv:P8PCLF5tiDKfZrZGaEDH+p7UxSkr+ce8QxJJxpULsKE=,tag:BHZnW96+R1nTPjmCeCtNoQ==,type:str]
ADMIN_PASSWORD: ENC[AES256_GCM,data:alHdDXuw1nJSOYM/2gamUCVr583htSXP/g==,iv:Tn9YlS+CMsQO96jyFs7as5CG8pC8zttxLXG+JwR95ME=,tag:9KnvViAmVA5rrgjD6hVmAg==,type:str] ADMIN_PASSWORD: ENC[AES256_GCM,data:MRix2LC962BzZW6sRcycNBcsfnvHucfkBg==,iv:TgEL7bUymwG99wb1A1huBl0qbz53zm6BzEvMonHwi8s=,tag:IN4dPYYxaZt4ViDiXOLvnQ==,type:str]
ADMIN_TOKEN: ENC[AES256_GCM,data:bxZDnWP0ySaxJtBtPkXcPlIiDFuNO+OWe5m5ULJD7U+I0RFuZGvvpYZZ08VUOh9L4lT2827dbze5CRtDFYhRGgw+g/JtGuu4pXY=,iv:4Z1XIBERQ9LNzitwaPu+mO4RojirjtGP7/xVQm+yeZs=,tag:RksjFFzasXLdifmCBOJ0yA==,type:str] ADMIN_TOKEN: ENC[AES256_GCM,data:NVf9NtCnpaC2+8qrSES89GO/8cEm2+V4YJaPA6o5mzk4V7Xuyd0W9USz4UPlwdtdWLO0bjhk3OwpyrZgdCmJnQP9/rWLzDRdMEg=,iv:LZh5jWahnLYaUNgu0G09aftJa9rPd1bqh+82jw4IiZA=,tag:zlnTKxqe6MMtauF1W0dJNw==,type:str]
DATABASE_URL: null DATABASE_URL: null
SMTP_PASSWORD: ENC[AES256_GCM,data:M+lP5lBGJMUoD8ci5MMXnkTeluRtZWzIdg==,iv:yJcfSZWGLdiyskRujU030Fp3cxT6RCTYekSQ2sw7iB8=,tag:DZsxhnFF8XNPiBTP+7INFg==,type:str] SMTP_PASSWORD: ENC[AES256_GCM,data:zFyeMTHuE7Be9DHMqnlhd4VidTFlyoOGSQ==,iv:eT9wV0ssZskma0bbbM/9p5rZctfC6HY6Y+YFjntf9jc=,tag:WihbTrkvC2v9Wn5tmh6mnw==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
@ -17,14 +17,14 @@ sops:
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBpQmVwTDE3WVFrVmdvMWFX YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGLzRMd2ErUGl0b1ErVkZG
R2lVS1NTRjZiWXJCUTBja2M5SkJJNDVyV2hjClpISEtmSDRkK0FnV3d4YmtQY3Q0 bFF0V2dxV3lBc1lGcDFXNmx3OWZadGFqakFNCmsrMmpEWjFUVzRFS2JMOW9MZWJB
djJZc1RXTXp6RFBMNXF2UUJnTEROa1UKLS0tIG96STlndXZsZ01TMXFZaVE0Tmto TG5UQkNmendrZU1oRkJrU3BPMzh4cFkKLS0tIFFxQXRyMWxVMjV2ZGI3Y0JCSllU
cjBhMmlJM0taZGwzZlhBZnllOWt5OXcKydH6vX+P6YoHYEhlQuN3B5s/ydFQg/bp alJUd1dqeFNLRWJNTzB4T0Rib25ja00KU9O/9ceV/qIs/27sPUHHgOije0ckPPGf
+sufia1rWgVkOrZ7WxEWahVHa0TAJL0gQq5mlNsZJP+++GgtZdpfeQ== IUrshO3wqv6SBI1c/XlPHYWJSASjZZEk4wf3AkCVu3D4mm5bwD0J0w==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-09-27T20:21:51Z" lastmodified: "2024-09-26T20:49:14Z"
mac: ENC[AES256_GCM,data:qQZGHRZ7quFHLXlkNaZyTL+diw6AzZTXPcJbo1OOE6cWR5+slLyK4qHnCN4ioJXBbex+S23dKY1OJgk93mW8jDwIvfEW80SFYlgITXjxLWJRJJLnNcjCvKi5U7mtUzW1nFxZhKJpzv+uBEse0TFXMfCalZn5FXfT8xjiKeqGPu8=,iv:uEgpubv6bF8ciseSdwJcziC4e15ZDA338BzDjzmSZO8=,tag:Rgq9wKSTYQrdJfd4C08CCQ==,type:str] mac: ENC[AES256_GCM,data:bjYiffGodlB/2tV7thE3LUyyitTF/ovKRvygtDy5Ttfa69UcUyxZltDRhzFPS0J0lNQsfJ1ty+zm7MKtRjmHjUz1uce6xO9svEFNl1vWMaOz+2VcbrME4XQCqZeI9Slwd0C/r4lSWJJEp/8lLe6EexoYDu6t7Tr7TVvcXNO1038=,iv:+pXgGw4/5lFM69HiwSOReqaTB3vrYkyI4qEBdGuyi6E=,tag:TEYfphz57Wo9DK1TZJFK+A==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.0 version: 3.9.0

46
values/badhouseplants/secrets.velero.yaml
View File

@ -1,25 +1,25 @@
credentials: credentials:
useSecret: ENC[AES256_GCM,data:jNo9Hw==,iv:tFJ1xXlSvzdmGk32IxNoygKkOTYg1uhWiTQ+Fb4vxho=,tag:F+aoapAoe8EIwl97pcklIA==,type:bool] useSecret: ENC[AES256_GCM,data:synuEQ==,iv:DoTxRvHamHSPh6Fy7f2/lQbIXVQP7bg0+gRDNLK5ExI=,tag:IMxGc67WNUWtyv7xeqLKDw==,type:bool]
name: ENC[AES256_GCM,data:T6hiTDHyG7iqx0aQg4g6,iv:6ykrI3VcYPKInFAPsYl0TzynEdl/PQvCKQp0UCtytXM=,tag:IH64olXo7zJ2zOWDsqCUxQ==,type:str] name: ENC[AES256_GCM,data:iOdJiWlezjgsI1NsET8Q,iv:dt3Ugyi1/B2pHhPlUUfJZ8lT57OUZZhXdQ8qbm0D/20=,tag:N4mxjl0NGNxNDtwEZjvrpg==,type:str]
secretContents: secretContents:
data: ENC[AES256_GCM,data:rdQwbeRiROTz0JHarw4Xc7FMJ0ynSaFniR+8zi82bg1sdaTUrKZrveFktsvR05CsEuskIs0nVsJh99XmR5ro4NGvzc0V6hpR,iv:+poyt47TO3+lVzkK8L32OJreylYPJlZslBGpnNlO+aE=,tag:pMIQ6aEGC8ifEdfkA+RUQw==,type:str] data: ENC[AES256_GCM,data:x2kwYP7i0Nz0YhjaoOLY7mYdXchdYwy2wZDypePGyS18dfBttmrzgp4JCPpFbL3QbkmK4u+Cs1+/Gyz1Zk3I7lnzW+T0rp4t,iv:zYfGPyGe5fDHI2MbSjrxFqRmjSChzA9KrKXCGoEyzrw=,tag:AGOh63/OVROHo5VYXV9tzg==,type:str]
sops: sops:
kms: [] kms: []
gcp_kms: [] gcp_kms: []
azure_kv: [] azure_kv: []
hc_vault: [] hc_vault: []
age: age:
- recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8 - recipient: age1vzkv97n2p7gfkw8dyx8ctz2kumattz89th2jq47zyjyrarmnssysdkw9v8
enc: | enc: |
-----BEGIN AGE ENCRYPTED FILE----- -----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKYldnZHQ0NCs3MDg2VGgy YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2QVJqcDUrSll4ZkJGZXFF
MWdxS3dzbk9KMllXcWF6eENxZGhValJYR1VzCmJKS09RZXcrckJGU1o5akFidnZa dWIybkc4QlduakIvSzM2eHkzNHdUWTdibFZJClROdDZmRU5NcE1TbjZnTDhZNEdY
dXo0QUxOMThyR1Vqajg0T0RSZ0dtaEUKLS0tIGZ5WjBZYlVYS3pmamF0dUszU1dM dytnU1l4Z3BUUk9NNVprK2o2UDZ6d3MKLS0tIG5EVHpZaThPYmkzcVZWaFgvbW5r
WDhwZkNTTzR5UGRpYkFUTWdldlVEd0UKr/6w/J2wHcE+N8Ej9+X596ENLtl/Ux23 MnkvbjY1dzV1cU5BNjU4aG1EekNsWFEKZavz2hNlogTfUH2oz6ovfv9vmlmbBy7C
aTHu7gPHMEWZx4/r3HQWkY4IfQBM3Hl2069DhiXSyFPZJPYB6KECXA== fIrWnBzmO+bl2GIb3mNXUPv8HjfuVN6YzFdew5Kxhls1P5op/8cEVQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2024-09-27T21:21:45Z" lastmodified: "2024-08-22T13:52:31Z"
mac: ENC[AES256_GCM,data:GdEoqBoX4sjt0Q/89H5vl0n0B8tRLQP+LUwKu3joos1l9w3tVvzDV+a51DDLRtMHKHQlsUMl8aJ/xzBoE61qjlDSZ/AbQ+P5gv1LRMwsDSDhpv8NJH1wfT920MMCYdB2z/xuqwnhymiYFIM+c2dEcBU0bx342f58jn5WMn6n9Ac=,iv:BnOEGSyPyLgPc5iGLhDXH+Roiy3Gt7o79hUK2P8z1dc=,tag:N/vks8VJEDnEs/r6eDR45A==,type:str] mac: ENC[AES256_GCM,data:/tPHVPEigjHM3nmoNKcyF+v2rjFKPgMA0OVdjNtuPE6zkg/W2U59CqmFaqSfLkswH9OZdtC8ObyKELhEqPOAYdMzFpyOGAtYB0wpY6ghsza9O4qFhuvpHp0Nv2qFT4BtEvbIofn1tVAAfRiRvQo2oV18hW116HAcyoTLBsLAzPo=,iv:plcyO/TXxXgmuy8YA0bmCYWdEmWXhHydLQYZxr/bDpU=,tag:xAk6qnS2ju61Nhpi5gvWYw==,type:str]
pgp: [] pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.0 version: 3.9.0

2
values/badhouseplants/values.gitea.yaml
View File

@ -103,7 +103,7 @@ gitea:
TYPE: redis TYPE: redis
mailer: mailer:
ENABLED: true ENABLED: true
FROM: bot@badhouseplants.net FROM: gitea@badhouseplants.net
PROTOCOL: smtp+startls PROTOCOL: smtp+startls
SMTP_ADDR: stalwart.badhouseplants.net SMTP_ADDR: stalwart.badhouseplants.net
SMTP_PORT: 587 SMTP_PORT: 587

32
values/badhouseplants/values.grafana.yaml
View File

@ -23,22 +23,22 @@ datasources:
datasources: datasources:
- name: Prometheus - name: Prometheus
type: prometheus type: prometheus
url: http://prometheus-operated.observability.svc.cluster.local:9090 url: http://prometheus-operated.monitoring.svc.cluster.local:9090
access: proxy access: proxy
isDefault: true isDefault: true
grafana.ini: grafana.ini:
server: server:
root_url: https://grafana.badhouseplants.net root_url: https://grafana.badhouseplants.net
auth: auth:
signout_redirect_url: "https://authentik.badhouseplants.net/application/o/grafana/end-session/" signout_redirect_url: "https://authentik.badhouseplants.net/application/o/grafana/end-session/"
oauth_auto_login: true oauth_auto_login: true
auth.generic_oauth: auth.generic_oauth:
name: authentik name: authentik
enabled: true enabled: true
client_id: "grafana" client_id: "grafana"
scopes: "openid profile email" scopes: "openid profile email"
auth_url: "https://authentik.badhouseplants.net/application/o/authorize/" auth_url: "https://authentik.badhouseplants.net/application/o/authorize/"
token_url: "https://authentik.badhouseplants.net/application/o/token/" token_url: "https://authentik.badhouseplants.net/application/o/token/"
api_url: "https://authentik.badhouseplants.net/application/o/userinfo/" api_url: "https://authentik.badhouseplants.net/application/o/userinfo/"
# Optionally map user groups to Grafana roles # Optionally map user groups to Grafana roles
role_attribute_path: contains(groups, 'Admins') && 'Admin' || contains(groups, 'DevOps') && 'Editor' || 'Viewer' role_attribute_path: contains(groups, 'Admins') && 'Admin' || contains(groups, 'DevOps') && 'Editor' || 'Viewer'

2
values/badhouseplants/values.kyverno.yaml
View File

@ -1,2 +0,0 @@
config:
excludeKyvernoNamespace: false

2
values/badhouseplants/values.minecraft.yaml
View File

@ -104,7 +104,7 @@ minecraftServer:
ingress: ingress:
enabled: false enabled: false
persistence: persistence:
storageClass: openebs-hostpath storageClass: longhorn
#storageClass: local-path #storageClass: local-path
dataDir: dataDir:
enabled: true enabled: true

7
values/badhouseplants/values.namespaces.yaml
View File

@ -1,8 +1,11 @@
namespaces: namespaces:
- name: kyverno - name: monitoring
- name: observability
- name: databases - name: databases
- name: applications - name: applications
- name: development
- name: production
- name: platform - name: platform
- name: games - name: games
- name: pipelines - name: pipelines
- name: rook-ceph
- name: longhorn-system

36
values/badhouseplants/values.openebs.yaml
View File

@ -1,36 +0,0 @@
localpv-provisioner:
hostpathClass:
isDefaultClass: true
zfs-localpv:
crds:
zfsLocalPv:
enabled: false
lvm-localpv:
crds:
lvmLocalPv:
enabled: false
mayastor:
csi:
node:
initContainers:
enabled: false
etcd:
# -- Kubernetes Cluster Domain
clusterDomain: cluster.local
localpv-provisioner:
crds:
enabled: false
openebs-crds:
csi:
volumeSnapshots:
enabled: false
keep: true
engines:
local:
lvm:
enabled: false
zfs:
enabled: false
replicated:
mayastor:
enabled: false

33
values/badhouseplants/values.openvpn.yaml
View File

@ -1,20 +1,18 @@
image: ---
repository: zot.badhouseplants.net/allanger/container-openvpn # ------------------------------------------
# ------------------------------------------ # -- Istio extenstion. Just because I'm
# -- Istio extenstion. Just because I'm # -- not using ingress nginx
# -- not using ingress nginx # ------------------------------------------
# ------------------------------------------
# istio:
# enabled: true
# istio: # istio:
# - name: openvpn-tcp-xor # enabled: true
# gateway: istio-system/badhouseplants-vpn # istio:
# kind: tcp # - name: openvpn-tcp-xor
# port_match: 1194 # gateway: istio-system/badhouseplants-vpn
# hostname: "*" # kind: tcp
# service: openvpn-xor # port_match: 1194
# port: 1194 # hostname: "*"
# service: openvpn-xor
# port: 1194
# ------------------------------------------ # ------------------------------------------
traefik: traefik:
enabled: true enabled: true
@ -28,9 +26,11 @@ tcproute:
enabled: false enabled: false
storage: storage:
size: 128Mi size: 128Mi
openvpn: openvpn:
proto: tcp proto: tcp
host: 195.201.249.91 host: 195.201.249.91
easyrsa: easyrsa:
cn: Bad Houseplants cn: Bad Houseplants
country: Germany country: Germany
@ -38,6 +38,7 @@ easyrsa:
city: Duesseldorf city: Duesseldorf
org: Bad Houseplants org: Bad Houseplants
email: allanger@zohomail.com email: allanger@zohomail.com
service: service:
type: ClusterIP type: ClusterIP
port: 1194 port: 1194

8
values/badhouseplants/values.prometheus.yaml
View File

@ -1,3 +1,4 @@
---
# ------------------------------------------ # ------------------------------------------
# -- Istio extenstion. Just because I'm # -- Istio extenstion. Just because I'm
# -- not using ingress nginx # -- not using ingress nginx
@ -12,12 +13,14 @@ kubeApiServer:
enabled: false enabled: false
grafana: grafana:
enabled: false enabled: false
prometheus-node-exporter: prometheus-node-exporter:
prometheus: prometheus:
monitor: monitor:
enabled: true enabled: true
jobLabel: jobLabel jobLabel: jobLabel
interval: 60s interval: 60s
defaultRules: defaultRules:
create: true create: true
rules: rules:
@ -49,10 +52,11 @@ defaultRules:
prometheus: true prometheus: true
prometheusOperator: true prometheusOperator: true
windows: false windows: false
prometheus: prometheus:
prometheusSpec: prometheusSpec:
enableAdminAPI: true enableAdminAPI: true
retentionSize: 3GB retentionSize: 1GB
retention: 20d retention: 20d
podMonitorNamespaceSelector: podMonitorNamespaceSelector:
any: true any: true
@ -72,4 +76,4 @@ prometheus:
accessModes: ["ReadWriteMany"] accessModes: ["ReadWriteMany"]
resources: resources:
requests: requests:
storage: 4Gi storage: 1Gi

2
values/badhouseplants/values.stalwart.yaml
View File

@ -42,7 +42,7 @@ workload:
storage: storage:
data: data:
enabled: true enabled: true
storageClassName: openebs-hostpath storageClassName: ceph-filesystem
size: 1Gi size: 1Gi
accessModes: accessModes:
- ReadWriteMany - ReadWriteMany

3
values/badhouseplants/values.vaultwardentesttest.yaml
View File

@ -1,3 +1,4 @@
---
workload: workload:
kind: Deployment kind: Deployment
strategy: strategy:
@ -45,7 +46,7 @@ extraVolumes:
emptyDir: {} emptyDir: {}
storage: storage:
data: data:
storageClassName: openebs-hostpath storageClassName: ceph-filesystem
env: env:
environment: environment:
enabled: true enabled: true

36
values/badhouseplants/values.velero.yaml
View File

@ -5,27 +5,29 @@ initContainers:
volumeMounts: volumeMounts:
- mountPath: /target - mountPath: /target
name: plugins name: plugins
configuration: configuration:
features: EnableCSI features: EnableCSI
backupStorageLocation: backupStorageLocation:
- name: default - name: default
provider: aws provider: aws
plugin: velero/velero-plugin-for-aws:v1.2.1 plugin: velero/velero-plugin-for-aws:v1.2.1
bucket: velero bucket: velero
accessMode: ReadWrite accessMode: ReadWrite
credential: credential:
name: velero-s3-creds name: velero-s3-creds
key: data key: data
config: config:
region: us-east-1 region: us-east-1
s3ForcePathStyle: true s3ForcePathStyle: true
s3Url: https://s3.e.badhouseplants.net:443 s3Url: https://s3.e.badhouseplants.net:443
publicUrl: https://s3.e.badhouseplants.net:443 publicUrl: https://min.e.badhouseplants.net:443
volumeSnapshotLocation: volumeSnapshotLocation:
- name: aws - name: aws
provider: aws provider: aws
config: config:
region: us-east-1 region: us-east-1
deployNodeAgent: true deployNodeAgent: true
schedules: schedules:
daily: daily:

2
values/badhouseplants/values.woodpecker-ci.yaml
View File

@ -49,7 +49,7 @@ agent:
WOODPECKER_SERVER: woodpecker-ci-server:9000 WOODPECKER_SERVER: woodpecker-ci-server:9000
WOODPECKER_BACKEND_K8S_VOLUME_SIZE: 2Gi WOODPECKER_BACKEND_K8S_VOLUME_SIZE: 2Gi
WOODPECKER_BACKEND_K8S_NAMESPACE: pipelines WOODPECKER_BACKEND_K8S_NAMESPACE: pipelines
WOODPECKER_BACKEND_K8S_STORAGE_CLASS: openebs-hostpath WOODPECKER_BACKEND_K8S_STORAGE_CLASS: ceph-filesystem
serviceAccount: serviceAccount:
create: true create: true
rbac: rbac:

3
values/badhouseplants/values.zot.yaml
View File

@ -22,6 +22,9 @@ service:
persistence: false persistence: false
pvc: pvc:
create: false create: false
# accessMode: "ReadWriteMany"
# storage: 5Gi
# storageClassName: ceph-filesystem
mountConfig: true mountConfig: true
mountSecret: true mountSecret: true
strategy: strategy: